last executing test programs: 9.75827851s ago: executing program 3 (id=394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x27dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xb}, {0x5, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1000, 0x0, 0x9a, 0x8, 0x4, 0xfbf, 0x5, 0x1000001, 0x40}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240048e1}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @broadcast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d000000000001000000f0ffff0001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 9.755053343s ago: executing program 0 (id=395): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x11) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x5, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setreuid(0xee01, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}}, 0x4084) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet6_buf(r5, 0x29, 0x2f, &(0x7f0000000140)="daa354e866bdb03fc53fd50563cd19221fdf4ebd4dc1c5f4678c528fca7f96f672b74f995afa36ba78b408a43be885ef9d1831bd453830b9f923a7438ee7f23a0f1cb1d31ddca946d04d551231c169b0a28d9610456842b66ae6ce967c9331d2d9f70dbfef9991f760cc784b80fadb9bd2f181d923d692c9bd2369c41a453191c3c2603079e6dde8705b9a226aa78a69f3f16755a63f11b211e88b578d9df8c9f6fe75fc5adec04fee7c057aacd10f9322280388eb4bc6b54156817af64c872ee3e7d53638351e07102acee6d8adbed64df8", 0xd2) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffff61) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.512096953s ago: executing program 4 (id=396): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xfffffffffffffff4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48884}, 0x4090) (fail_nth: 1) 8.77019934s ago: executing program 2 (id=398): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x10000001}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x2}, 0x50) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'aio_iiro_16\x00', [0x8001, 0xb, 0x4, 0x0, 0xd, 0xcc7, 0x10001, 0x6, 0xa, 0xff, 0x2, 0x8, 0x8, 0x1100004, 0x20000001, 0x1, 0x6, 0x1a449, 0x42, 0x40000003, 0xc, 0x2, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x4, 0xc]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="400e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000100)=""/21, 0x15, 0x0, &(0x7f0000000200)=""/199, 0xc7}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x1ff, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000340)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0xf}, @ldst={0x1, 0x1, 0x1, 0x16, 0x7, 0x100}, @jmp={0x5, 0x1, 0x9, 0xa, 0xb, 0x50, 0x4}], &(0x7f0000000380)='GPL\x00', 0xa2a9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0x10, 0x7, 0x8000}, 0x10, r7, 0x0, 0x4, &(0x7f0000000440)=[r3, r5, r5, r1, r8, r5], &(0x7f0000000480)=[{0x3, 0x4, 0xd, 0x4}, {0x5, 0x5, 0xa, 0x4}, {0x2, 0x2, 0x1, 0xb}, {0x5, 0x5, 0xd, 0x4}], 0x10, 0x6}, 0x94) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "e302"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 8.769666105s ago: executing program 4 (id=399): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000270c0)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002800)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) 8.769299844s ago: executing program 3 (id=400): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440100001000130429bd7000000000007f000001000000000000000000000000ac1e01010000000000000000000000000000fffe4e280000000000203b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a01010200000000000000000000000000000000320000007f000001000000000000000000000000ff03000000000000feffffffffffff1f0100800000000000000200000000000003000000000000004e0000000000000081000000000000000000000000000000030000000000000005000000000000000800000000000000080000040000000000000000f9ffffff2000080000000000000000000200018168000000000000000c000800dc00080000070000480001007467723139322d67656e65"], 0x144}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"/425, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000140)={0xa, &(0x7f00000000c0)=[{0x652, 0x1, 0x4, 0x7f}, {0x401, 0xc, 0xfb, 0x80000001}, {0xff, 0xdb, 0x7, 0xfffffffb}, {0xc53b, 0x9, 0x80, 0x3}, {0xfffe, 0x0, 0x40, 0x4}, {0x3, 0x40, 0x0, 0x9}, {0x7, 0x9, 0x3, 0x7}, {0x7f, 0x9f, 0x3, 0x3}, {0x7e, 0x3, 0x0, 0x6}, {0x6, 0x5, 0xf8, 0x1}]}) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 6.635827864s ago: executing program 3 (id=404): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x6, 0x4) pipe(&(0x7f0000000280)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.227096258s ago: executing program 3 (id=406): socket$nl_route(0x10, 0x3, 0x0) rt_sigqueueinfo(0x0, 0x3a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233"], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r10, 0x8905, 0x1000000000000) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x10) 6.015133581s ago: executing program 4 (id=408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRESOCT], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000740)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xc7b4, @remote, 0x1}, @in={0x2, 0x4e24, @private=0xa010102}}}, 0x118) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0xfffffffffffffe2b, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="090300000000000000002e00"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000000940)=[{{&(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)=""/13, 0xd}, {&(0x7f00000003c0)=""/214, 0xd6}], 0x2, &(0x7f00000004c0)=""/31, 0x1f}, 0x9}, {{&(0x7f0000000500)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/80, 0x50}, {&(0x7f0000000640)=""/126, 0x7e}, {&(0x7f00000006c0)=""/36, 0x24}], 0x3, &(0x7f0000000880)=""/155, 0x9b}, 0x2}], 0x2, 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r4, 0x0, 0x0, 0x60, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x4000000}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xddf}, &(0x7f00000000c0)=0x8) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x81840) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r8) ioctl$HIDIOCINITREPORT(r8, 0x4805, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) openat$vcsu(0xffffffffffffff9c, 0x0, 0x200040, 0x0) 5.225749107s ago: executing program 0 (id=409): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000004ec0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x629a}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000180)="19", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e20, 0x3, @private0, 0xc83}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000000580)="3c2ba6f8ece52e80", 0x8}], 0x1, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x3404c854) 5.023950448s ago: executing program 0 (id=410): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00', 0x0}) rename(0x0, 0x0) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c06030750050008001300", @ANYRES32=r2, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 5.023136043s ago: executing program 1 (id=411): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x102) lseek(r1, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sync_file_range(r2, 0x3, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c701265406c7f306003d8a0f4bd0000000300000000002f59911800"}}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000100)={0xfee00000, 0x10000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 5.006287427s ago: executing program 4 (id=412): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x5, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r3) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendmmsg$inet(r6, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x1c4}], 0x1}}], 0x1, 0x400c0) sendto$inet(r6, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) 4.991578984s ago: executing program 2 (id=413): openat$uinput(0xffffff9c, &(0x7f0000000180), 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r1, r1) setpgid(0x0, r1) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x1) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 4.113192274s ago: executing program 4 (id=414): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES64], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8922, &(0x7f0000000280)={'dummy0\x00'}) (fail_nth: 2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r3, 0x0, 0x0, 0x401, 0x0) semop(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000000)=[{0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 3.787328838s ago: executing program 2 (id=415): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x1, 0x0, &(0x7f0000000380)="e4", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000004c0)=""/83) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001a00010026bd70000200000002200083"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x7], &(0x7f0000000380), 0xffffffca, 0x1}}, 0x40) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x11, r0, 0x80000000) 3.163920881s ago: executing program 0 (id=416): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7", 0x9}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.144767682s ago: executing program 1 (id=417): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000080)={0x20000a, 0xffd, 0x428}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x5, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40080c0}, 0x80) 3.094426653s ago: executing program 2 (id=418): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000270c0)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002800)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) 2.863536197s ago: executing program 0 (id=419): syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b1d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r3 = dup(r2) ioctl$LOOP_CLR_FD(r3, 0x4c01) recvmmsg(r3, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/124, 0x7c}, {&(0x7f0000000140)=""/128, 0x80}], 0x2, &(0x7f00000001c0)=""/233, 0xe9}, 0x7ff}, {{&(0x7f00000002c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1, &(0x7f0000000440)=""/46, 0x2e}, 0x81}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f00000014c0)=""/144, 0x90}, 0x2}, {{&(0x7f0000001580)=@isdn, 0x80, &(0x7f0000001800)=[{&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000001600)=""/29, 0x1d}, {&(0x7f0000001640)=""/93, 0x5d}, {&(0x7f00000016c0)=""/117, 0x75}, {&(0x7f0000001740)=""/169, 0xa9}], 0x5}, 0x800}, {{&(0x7f0000001880)=@nl=@proc, 0x80, &(0x7f0000004e40)=[{&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000001900)=""/90, 0x5a}, {&(0x7f0000001980)=""/203, 0xcb}, {&(0x7f0000004c40)=""/125, 0x7d}, {&(0x7f0000004cc0)=""/137, 0x89}, {0x0}], 0x6, &(0x7f0000004ec0)=""/87, 0x57}, 0x5}, {{0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x1}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)}, 0xa507}, {{0x0, 0x0, &(0x7f0000006880)=[{&(0x7f0000006680)=""/77, 0x4d}, {&(0x7f0000006700)=""/48, 0x30}, {0x0}, {0x0}], 0x4, &(0x7f00000068c0)=""/84, 0x54}}], 0x8, 0x40002002, &(0x7f0000006b40)={0x77359400}) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) 2.495534246s ago: executing program 1 (id=420): openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7", 0x9}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000e00)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x4, 0x1a, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x130, 0x29, 0x36, {0x5e, 0x23, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x966, 0x7, 0xfffffffffffffff7, 0x2000000000001, 0x1]}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x6, [0x7fff, 0x1ff, 0x2133, 0x80, 0x9]}}, @generic={0x8, 0x50, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x2b8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.494249722s ago: executing program 4 (id=421): socket$can_raw(0x1d, 0x3, 0x1) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500004000002020207b1af8ff00001e00bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x3d, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800800000000000850a602200000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect$uac1(0x3, 0xda, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201b0c63e0739086b1d01014000010203010902c80003010000730904000000010100000a24010000060201020c24020502020602060006ff090401000001020000097801010101020000072401090100000924020206000300060c240201270320cbb2bb9bcb0905010900021f0504071001000006000900020000040000000904020101ff"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x8, 0xfdca) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) syz_usb_connect(0x5, 0x948, &(0x7f0000000c00)={{0x12, 0x1, 0x351, 0xdf, 0x84, 0x81, 0x20, 0x15a4, 0x1001, 0x7d48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x936, 0x2, 0x0, 0x9, 0x0, 0x5, [{{0x9, 0x4, 0x3e, 0x8d, 0x10, 0x7e, 0x87, 0xef, 0x99, [@uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0xb, 0x6}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "7ca5d06c9e9b2222d8"}]}, @hid_hid={0x9, 0x21, 0x3, 0x6d, 0x1, {0x22, 0xd99}}], [{{0x9, 0x5, 0x5, 0x0, 0x10, 0x2, 0xc4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x44, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xfffc}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0xc, 0x40}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0xe3, 0x4, 0x8, [@generic={0x54, 0x21, "d233812ac04271516db687e18bcc9083ed7baf9d59ae5f6d30827a9a25d9c7dfbec1b8cc231013c7ca956fe1087112245b0b6498c30f47f4ef5e0a1c041a0380f98fac7ff02a3fa1c552e9866613e88c5a9a"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0x7, 0x81, 0x7, [@generic={0x5d, 0x5, "09d12edee139e7beccdf52343f6b2f2144c2086f71c882e8278a370806d5bc6331eff7f8840c10bb96d3474d51eb4eddade9cf8ee7e2404ce265aeba18a2c4701c8c6056b8719e9bb09d0e3b69d0513106d5e18ef94a7cbeeb1dd8"}, @generic={0x101, 0x23, "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"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x9, 0x6, 0x8, [@generic={0xf, 0x7, "6f82aaca3ddcbf4c20e1bf3465"}, @generic={0x43, 0x2, "688911e4dae3294e9adaa41bada21eb258667d8cc21485cb1d759fc0ceb97bed69587ea817f21fa24943305ec50084a92f65182c7629de1953668092850ab12b02"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x4a, 0x7f, 0xc5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x401}]}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0xfa, 0x2, 0x33, [@generic={0x32, 0x22, "5f95b6e7195291020b5b10ca4993b78b84831b38a40c105acd8d5d6e254087e38361420d59b7b60e53aac64ab42d368e"}]}}, {{0x9, 0x5, 0xa, 0x0, 0xc9be1fc362f940ef, 0x3, 0x7, 0x2, [@generic={0x62, 0x31, "75044b564952951be2b280dc29bf4652c2f6ada28a7964c3a63051f1923e40cabb82108477c57bb52b152f237c689d662a6109cf31a9ad269e93251f8daf5928605d52923a266c41ad9f2a750f45e2e909bb3f243d2cbd8ab81334418b2a6bc0"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0xe8, 0x42, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc0, 0xd}, @generic={0xd8, 0xc, "38f9c6c7d8b8078551c7bb762dbefda75ebe98042b33196756c08ffaddb351117be341e5cedc25e8e044fa1529da821683a74d84673ab46e37af33bae72fd319f8ed397fac8697145ca14d30de070e0792711a3e53ff3b73b038dcb6c5ceedaa93b6548bc6965e817fe5803f307fd8cd58f2dd531fad8fe5f1f9c39a7c17ec6cc276dce2000318d2a721308020b5a047e7d856fc4dbcfa2e08a61d3becd39dd79dacbea52ad34220a3891d0cca511c71df14a2dde46057d66bba4215a0fa5bd47ec78cb44697ff715e0e7cbf1d451cc9e448521f996d"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x871}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x3, 0xa8f9}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x3, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe2, 0xf7}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0xe, 0x4, 0x9}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x9, 0x6, 0x5}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x3, 0x2, 0x6f}}, {{0x9, 0x5, 0x2, 0x1, 0x400, 0x2, 0x0, 0x1, [@generic={0x32, 0x6, "241a1ad18a8362e82278d521b4ac110fd85b0aaf03d4301de4698cc597cb96d7d3d4336974fdd772b33e7f826449a104"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x7f, 0x9, 0x4}}]}}, {{0x9, 0x4, 0x53, 0x40, 0xf, 0x31, 0x3e, 0x8, 0xeb, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x9, 0x3, 0x2, 0xe8}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x76, 0x3, 0x80, 0x54, ':'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x2f, 0xb, "2ee4c7689691f5"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xfb, 0x1, 0x8, 0xd, "25a6", "b971"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x2, 0x2, 0x8, 0x1, "2e3252113b5d6a37"}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xac18}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8, 0xd5, 0xc4}}], [{{0x9, 0x5, 0xf, 0x10, 0x400, 0x9, 0xf1, 0x9}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x0, 0xfd, 0xfc}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0x4, 0x1, 0x5b, [@generic={0xad, 0x0, "919d80215442fed0ec25d0c91c8f398212adc67de7884c21a36f9bb0e40df9c1f32ba0ef3913c5901098f42f17ba40b7685d439b2a80cf1960134e00d05cbe84a7e3e3434818afc877fb0fb26ee9fbe8c9cc6cc27df7f6836adcbfef6c2f2d0d6ca431c41bde5f709723b28e9505487d957d4a023c9c9579119abdd8d5a8377924b5573529c83d78473c53e90e1b4a7e5ad479523a69384374860000a75315e66a811a054ab0dd8c8a34d8"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x8, 0x8, 0x9, [@generic={0x51, 0x23, "0a40ef8fb114a1c8bc8f8ae0c4e425324b67ecbaf64380546d59cd63824834bf72028fcfe51a397d31b10846b1285aa190dbff7b0d863d4ec49f1fb4ce66b85b74afc6da3e849341d9bc950756d83e"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xe8, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x7fff}]}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0x7f, 0x3, 0x9}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x72, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x4}]}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0x67, 0x1, 0xcb, [@generic={0x87, 0xe, "c0d57b8806c6792c66e5640c58e9fd03fe5978a464319771f9b2925d59d7db7447b13adc831b4235adcfb6aebf85e8f80e24123df475fbf9e54212583f83deb71e02d7e570d0c6960ea6bbd89a30fd62138bd5e2b77153250efba5a80b9063ea4b7b64c761e5e5cf013652ed5eeab766ffcfcb7d9f044e2ba984341cf3d1c5181bf94da16b"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x7, 0x68, 0xa, [@generic={0x13, 0xa, "a03b285b82aed719715eafe7f79eb6df72"}, @generic={0xc5, 0xa, "43590ae7e66b418e53f43e0be21ede1dc469f1632e63bf8e9a04195298b263ffdb4743d006a81589847a4cba10057762c14ce22a3b5a1925a1d7c962d7e3983b1700443a682133dbd019a740fda30b112909f26f98e5f1cc48477f68598ea4fe174530401c036ab01fda3877c4e37756f2e1a3c46fc915d387034f13a1ef0916c4b674cdf21c23a8100285ef91dbb3501a0368741f5be264bdd4161ba4c8d1abd156c003ec5a33eb057a277adfd4e8223394a15606bbc4a212dbaf95a6bc2497900566"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x40, 0xab, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x3}, @generic={0xfc, 0x1, "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"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0xfe, 0x0, 0x3}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0xff, 0x7, 0x2, [@generic={0x2f, 0x8, "697356cc7cf25cce1898ee4b7a39b1381d4d7e835842075f1f13b28257fa9a2c1ba99e0ba7b7c492596328d06e"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x2e, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x3}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x6, 0xd, 0xb7}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x3, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf9, 0xcf}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x0, 0x7, 0x9, 0x8, 0x4}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000140)=@lang_id={0x4}}]}) 2.343618101s ago: executing program 1 (id=422): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x8, &(0x7f0000000300)) r6 = dup(0xffffffffffffffff) accept4$llc(r6, 0x0, 0x0, 0x80800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40000010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x8880) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000008380)={0x14, 0x12, 0x1, 0x0, 0x8000, "", [@nested={0x4, 0x1d}]}, 0x14}], 0x1, 0x0, 0x0, 0x8001}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=r10, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000000000214000700fc0200000000000000ffff00000000000400120008000100", @ANYRES32=0x0, @ANYBLOB="942558040470ff5eb6cf9a3c653974e474d0b8819401b941570ae7a27e7a644e88b45cf444e7e0782a46e2300382c8eec26f7c1d4557ca6674612c7e2fbf733a46fe07fab44ac81d8b532761cc1d7a8c337d02961bd705c0a9f39f78d08900c169ff9a3d46127f0920b6064b9ff9b3f805e904c24f3d229c44661ee1953d4ded2a1ef511a87f337ccbe97cbe"], 0x6c}}, 0x0) 2.275671444s ago: executing program 0 (id=423): openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10susz\a\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x301) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000011c0)={0x0, 0x0, r4, r5, 0x2000, 0x0, 0x2, 0x802, {0x6, 0x2, 0x7, 0x69, 0xf4b, 0x0, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0xf6, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) 1.63300813s ago: executing program 2 (id=424): mprotect(&(0x7f0000d47000/0xd000)=nil, 0xd000, 0x1) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) socketpair(0x8, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000015a08f42584a07cd000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x5, &(0x7f0000001c80)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x7, 0xe, 0x0, &(0x7f0000000300)="79da19fcdb16d7f778b71c2b637f2a1f12bdd3de90e2ae66247d", 0x0, 0x8000ffb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x7e) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0xb) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x2, 0x4002) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES8=r7], 0x74}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) 1.49160808s ago: executing program 3 (id=425): openat$uinput(0xffffff9c, &(0x7f0000000180), 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r1, r1) setpgid(0x0, r1) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x1) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 1.36034689s ago: executing program 1 (id=426): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x5, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r3) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) 122.948246ms ago: executing program 1 (id=427): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, 0x0) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x42000006, 0x3ce}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@ethernet={0x306, @remote}, 0x80, 0x0}, 0x0, 0x854}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000340), 0x3135c48, &(0x7f0000000680)=ANY=[@ANYRESOCT=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES16=r4, @ANYRES32, @ANYBLOB="e877b83c4cb876bdd0df5603bedf1fac68a3f77ebb201dcc0a3f44b7841c44531219a66e7b09b075bd8268e00d042ad7b9d62cd2b094609252a359e7f2b0e40579a6af892bdddc65543173425e9952e43f26dd61ed4c5d786098471af7cccec2bf139344b202a846d3ad9c33d3173bd38a30f9dda0ada940d791203ca8463e98e15587ed555c28ae467ba4e6f68bacaa94266286d2f8f63537", @ANYRES8, @ANYBLOB="2f3561eb0e114083bd5855ba95adaf7518909b88dad79ff98adc3239801076ba0bc51b51"]) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x5, "1486027a94645e734a0000e11000"}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) syz_open_dev$sndpcmp(0x0, 0x0, 0x2) syz_io_uring_setup(0x888d, 0x0, &(0x7f0000000000), &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x3, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}, 0xa}, 0x39) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xd7f, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 46.977775ms ago: executing program 2 (id=428): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'caif0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r1}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_clone(0x82172011, 0x0, 0x0, 0x0, 0x0, 0x0) pause() getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800100b, r4, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r4, r6, 0x0, 0x4) socket(0x11, 0x3, 0x0) 0s ago: executing program 3 (id=429): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d", 0x5}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000880)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x4, 0x1a, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x7d, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898618a50ea000000124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989292e40a30db9d6a3286604207fdbbf8893ab968939c340ba3b"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7e, 0x8001, [0x9, 0x4, 0x6, 0x4]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @ra={0x5, 0x2, 0x3b3f}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x180}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): v="overlay" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.443533][ T30] audit: type=1400 audit(1766456858.274:150): avc: denied { setopt } for pid=5971 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.486635][ T30] audit: type=1400 audit(1766456858.544:151): avc: denied { map_read map_write } for pid=6002 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 75.579607][ T6008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.968314][ T30] audit: type=1400 audit(1766456859.264:152): avc: denied { read write } for pid=6014 comm="syz.4.15" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.991840][ T30] audit: type=1400 audit(1766456859.264:153): avc: denied { open } for pid=6014 comm="syz.4.15" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 76.162370][ T5928] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.775666][ T30] audit: type=1400 audit(1766456859.604:154): avc: denied { ioctl } for pid=6014 comm="syz.4.15" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 76.852740][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.896204][ T5928] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 76.906293][ T30] audit: type=1400 audit(1766456860.214:155): avc: denied { create } for pid=6018 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 77.324393][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 77.335694][ T5932] usb 2-1: USB disconnect, device number 2 [ 77.375055][ T24] usb 1-1: USB disconnect, device number 2 [ 77.395084][ T5928] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 77.414288][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.539589][ T30] audit: type=1400 audit(1766456860.834:156): avc: denied { read write } for pid=6021 comm="syz.4.17" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.550938][ T5928] usb 4-1: Product: syz [ 78.032805][ T6024] loop6: detected capacity change from 0 to 2640 [ 78.040021][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.062930][ T5990] libceph: connect (1)[c::]:6789 error -101 [ 78.069606][ T6025] ceph: No mds server is up or the cluster is laggy [ 78.085365][ T5928] usb 4-1: Manufacturer: syz [ 78.097747][ T5990] libceph: mon0 (1)[c::]:6789 connect error [ 78.105062][ T6028] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 78.119114][ T6028] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 78.120969][ T5928] usb 4-1: SerialNumber: syz [ 78.129117][ T6028] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 78.337227][ T6032] ubi31: attaching mtd0 [ 78.338739][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.343891][ T6032] ubi31: scanning is finished [ 78.350199][ T5928] usb 4-1: config 0 descriptor?? [ 78.354161][ T6032] ubi31: empty MTD device detected [ 78.477052][ T5928] usb 4-1: can't set config #0, error -71 [ 78.607007][ T6028] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 78.678707][ T6028] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 78.683700][ T5928] usb 4-1: USB disconnect, device number 3 [ 78.689239][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.893863][ T6028] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 79.322898][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.337745][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.350379][ T6037] autofs: Bad value for 'fd' [ 79.351009][ T6028] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 79.366371][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.394068][ T6028] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 79.516188][ T6047] /dev/nullb0: Can't open blockdev [ 81.669467][ T49] cfg80211: failed to load regulatory.db [ 81.691173][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 81.698148][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 81.698162][ T30] audit: type=1326 audit(1766456862.804:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbb98f749 code=0x7ffc0000 [ 81.729913][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.861181][ T30] audit: type=1326 audit(1766456862.804:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbb98f749 code=0x7ffc0000 [ 81.885123][ T30] audit: type=1326 audit(1766456862.814:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fedbb98f749 code=0x7ffc0000 [ 81.888853][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.942483][ T6032] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 82.019692][ T6024] ldm_validate_partition_table(): Disk read failed. [ 82.039179][ T30] audit: type=1400 audit(1766456862.814:171): avc: denied { mounton } for pid=6043 comm="syz.2.22" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 82.095823][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.118770][ T6051] No control pipe specified [ 82.131504][ T6024] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.141142][ T30] audit: type=1326 audit(1766456862.824:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbb98f749 code=0x7ffc0000 [ 82.178907][ T6056] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.204720][ T6024] Dev loop6: unable to read RDB block 0 [ 82.329938][ T6024] loop6: unable to read partition table [ 82.361836][ T30] audit: type=1326 audit(1766456862.824:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbb98f749 code=0x7ffc0000 [ 82.507704][ T30] audit: type=1326 audit(1766456862.834:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fedbb98f749 code=0x7ffc0000 [ 82.511080][ T6024] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 82.543874][ T30] audit: type=1326 audit(1766456862.834:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbb98f749 code=0x7ffc0000 [ 82.779089][ T6063] Cannot find add_set index 65532 as target [ 83.240172][ T30] audit: type=1326 audit(1766456862.834:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedbb98f749 code=0x7ffc0000 [ 83.263989][ T30] audit: type=1326 audit(1766456862.834:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fedbb98f749 code=0x7ffc0000 [ 83.473381][ T6068] netlink: 76 bytes leftover after parsing attributes in process `syz.4.27'. [ 83.582843][ T6065] netlink: set zone limit has 4 unknown bytes [ 83.602744][ T5990] IPVS: starting estimator thread 0... [ 83.727328][ T6070] IPVS: using max 43 ests per chain, 103200 per kthread [ 85.146720][ T5928] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.022448][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 86.039210][ T5928] usb 3-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 86.137839][ T5928] usb 3-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 86.239063][ T6093] netlink: 72 bytes leftover after parsing attributes in process `syz.3.33'. [ 86.332247][ T6095] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 86.431524][ T5928] usb 3-1: config 0 interface 0 has no altsetting 0 [ 86.438361][ T5928] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 86.447505][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.007266][ T5928] usb 3-1: config 0 descriptor?? [ 87.044966][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 87.044982][ T30] audit: type=1400 audit(1766456870.344:213): avc: denied { ioctl } for pid=6089 comm="syz.1.32" path="socket:[9627]" dev="sockfs" ino=9627 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.105272][ T6097] Zero length message leads to an empty skb [ 87.127219][ T30] audit: type=1400 audit(1766456870.424:214): avc: denied { allowed } for pid=6094 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 87.539108][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 87.836356][ T5928] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 87.865296][ T5928] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 87.876258][ T6111] No control pipe specified [ 87.876290][ T30] audit: type=1400 audit(1766456871.184:215): avc: denied { mounton } for pid=6109 comm="syz.3.37" path="/6/file0" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.890983][ T5928] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 87.939753][ T5928] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 88.108635][ T5928] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 88.133734][ T5928] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 88.147970][ T5928] playstation 0003:054C:09CC.0001: unknown main item tag 0x0 [ 88.201234][ T49] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.311945][ T5928] playstation 0003:054C:09CC.0001: hidraw0: USB HID vff.ed Device [HID 054c:09cc] on usb-dummy_hcd.2-1/input0 [ 88.412079][ T5928] playstation 0003:054C:09CC.0001: Failed to retrieve feature with reportID 18: -71 [ 88.442797][ T5928] playstation 0003:054C:09CC.0001: Failed to retrieve DualShock4 pairing info: -71 [ 88.454877][ T49] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 88.478628][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.514585][ T5928] playstation 0003:054C:09CC.0001: Failed to get MAC address from DualShock4 [ 88.542874][ T49] usb 1-1: Product: syz [ 88.557305][ T49] usb 1-1: Manufacturer: syz [ 88.562006][ T5928] playstation 0003:054C:09CC.0001: Failed to create dualshock4. [ 88.575260][ T49] usb 1-1: SerialNumber: syz [ 88.577503][ T6128] loop6: detected capacity change from 0 to 2640 [ 88.588807][ T5928] playstation 0003:054C:09CC.0001: probe with driver playstation failed with error -71 [ 88.614883][ T49] r8152-cfgselector 1-1: Unknown version 0x0000 [ 88.630584][ T49] r8152-cfgselector 1-1: config 0 descriptor?? [ 88.642896][ T6127] buffer_io_error: 6 callbacks suppressed [ 88.642912][ T6127] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.661148][ T6127] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.667463][ T5928] usb 3-1: USB disconnect, device number 2 [ 88.670189][ T6127] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.690677][ T6127] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.700826][ T6127] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.709686][ T6127] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.732251][ T6127] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.741880][ T6127] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.750100][ T6127] ldm_validate_partition_table(): Disk read failed. [ 88.757144][ T6127] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.798588][ T6127] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.816083][ T6127] Dev loop6: unable to read RDB block 0 [ 88.848761][ T6127] loop6: unable to read partition table [ 88.863198][ T6128] ldm_validate_partition_table(): Disk read failed. [ 88.888269][ T6128] Dev loop6: unable to read RDB block 0 [ 88.920727][ T6128] loop6: unable to read partition table [ 88.958832][ T6128] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 89.130612][ T49] r8152-cfgselector 1-1: Unknown version 0x0000 [ 89.139420][ T49] r8152-cfgselector 1-1: bad CDC descriptors [ 89.180975][ T49] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 89.723429][ T30] audit: type=1400 audit(1766456873.014:216): avc: denied { mount } for pid=6133 comm="syz.4.43" name="/" dev="autofs" ino=8808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 89.760555][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.45'. [ 90.403857][ T30] audit: type=1400 audit(1766456873.704:217): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 90.533753][ T6154] netlink: 'syz.4.48': attribute type 10 has an invalid length. [ 90.758901][ T30] audit: type=1400 audit(1766456874.054:218): avc: denied { mount } for pid=6153 comm="syz.4.48" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 90.947138][ T30] audit: type=1400 audit(1766456874.054:219): avc: denied { sqpoll } for pid=6153 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.721073][ T30] audit: type=1400 audit(1766456875.004:220): avc: denied { create } for pid=6153 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.810544][ T30] audit: type=1400 audit(1766456875.004:221): avc: denied { bind } for pid=6153 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.880541][ T30] audit: type=1400 audit(1766456875.004:222): avc: denied { name_bind } for pid=6153 comm="syz.4.48" src=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 92.090994][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 92.091010][ T30] audit: type=1400 audit(1766456875.384:225): avc: denied { setopt } for pid=6173 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.571144][ T6180] netlink: 'syz.0.54': attribute type 1 has an invalid length. [ 92.578772][ T6180] netlink: 'syz.0.54': attribute type 3 has an invalid length. [ 92.586423][ T6180] netlink: 224 bytes leftover after parsing attributes in process `syz.0.54'. [ 92.610781][ T6180] program syz.0.54 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.626558][ T6180] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 92.635794][ T6180] overlayfs: missing 'lowerdir' [ 93.286752][ T30] audit: type=1400 audit(1766456875.394:226): avc: denied { create } for pid=6173 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.545625][ T30] audit: type=1400 audit(1766456875.544:227): avc: denied { getopt } for pid=6173 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.607403][ T5880] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.901069][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 94.355445][ T30] audit: type=1400 audit(1766456877.334:228): avc: denied { relabelfrom } for pid=6185 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 94.390446][ T5880] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 94.416671][ T5880] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 94.428872][ T30] audit: type=1400 audit(1766456877.334:229): avc: denied { relabelto } for pid=6185 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 94.516725][ T6190] xt_CT: No such helper "pptp" [ 94.522100][ T5880] usb 4-1: Product: syz [ 94.526269][ T5880] usb 4-1: Manufacturer: syz [ 94.530866][ T5880] usb 4-1: SerialNumber: syz [ 94.578694][ T5880] usb 4-1: config 0 descriptor?? [ 94.584749][ T30] audit: type=1400 audit(1766456877.894:230): avc: denied { connect } for pid=6194 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.617213][ T5880] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 94.657938][ T30] audit: type=1400 audit(1766456877.904:231): avc: denied { write } for pid=6194 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.805127][ T30] audit: type=1400 audit(1766456877.914:232): avc: denied { create } for pid=6194 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 94.862075][ T30] audit: type=1400 audit(1766456878.064:233): avc: denied { create } for pid=6187 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.921831][ T30] audit: type=1400 audit(1766456878.104:234): avc: denied { bind } for pid=6187 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.203362][ T5880] gspca_zc3xx: reg_w_i err -110 [ 95.213949][ T5880] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 96.311215][ T5880] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.491185][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 96.601245][ T5880] usb 5-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 96.645153][ T5880] usb 5-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 96.702059][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.745388][ T5880] usb 5-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 96.790773][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.852521][ T5880] usb 5-1: config 0 descriptor?? [ 97.552162][ T5880] usbhid 5-1:0.0: can't add hid device: -71 [ 97.568944][ T5880] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 97.602709][ T5880] usb 5-1: USB disconnect, device number 2 [ 97.731917][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 97.731933][ T30] audit: type=1400 audit(1766456881.034:250): avc: denied { create } for pid=6182 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.792134][ T30] audit: type=1400 audit(1766456881.094:251): avc: denied { setopt } for pid=6182 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.838842][ T30] audit: type=1400 audit(1766456881.134:252): avc: denied { add_name } for pid=6214 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.864711][ T30] audit: type=1400 audit(1766456881.134:253): avc: denied { create } for pid=6214 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.892523][ T30] audit: type=1400 audit(1766456881.134:254): avc: denied { write } for pid=6214 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=2231 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.019390][ T30] audit: type=1400 audit(1766456881.134:255): avc: denied { append } for pid=6214 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=2231 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.095928][ T6248] loop6: detected capacity change from 0 to 2640 [ 98.105482][ T5826] buffer_io_error: 32 callbacks suppressed [ 98.105496][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.121135][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.129520][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.138917][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.193104][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.205782][ T30] audit: type=1400 audit(1766456881.494:256): avc: denied { remove_name } for pid=6246 comm="rm" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=2231 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.254577][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.285361][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.415080][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.433063][ T30] audit: type=1400 audit(1766456881.494:257): avc: denied { unlink } for pid=6246 comm="rm" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=2231 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.438283][ T6255] tipc: Started in network mode [ 98.469916][ T6255] tipc: Node identity 4, cluster identity 4711 [ 98.476367][ T6255] tipc: Node number set to 4 [ 98.480172][ T5826] ldm_validate_partition_table(): Disk read failed. [ 98.510797][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.523242][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.531580][ T30] audit: type=1400 audit(1766456881.694:258): avc: denied { setopt } for pid=6253 comm="syz.4.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.552720][ T5826] Dev loop6: unable to read RDB block 0 [ 98.559323][ T5826] loop6: unable to read partition table [ 98.968788][ T6248] ldm_validate_partition_table(): Disk read failed. [ 99.077031][ T5990] usb 4-1: USB disconnect, device number 4 [ 99.125383][ T6248] Dev loop6: unable to read RDB block 0 [ 99.201367][ T6248] loop6: unable to read partition table [ 99.248660][ T6264] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 99.260064][ T30] audit: type=1400 audit(1766456882.564:259): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 99.283051][ T6248] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 99.353539][ T5190] ldm_validate_partition_table(): Disk read failed. [ 99.365677][ T5190] Dev loop6: unable to read RDB block 0 [ 99.399299][ T5190] loop6: unable to read partition table [ 99.763051][ T6277] loop5: detected capacity change from 0 to 7 [ 99.805057][ T6277] loop5: [ 99.812572][ T6277] loop5: partition table partially beyond EOD, truncated [ 99.820773][ T6268] autofs: Unknown parameter '00000000000000000000' [ 100.410668][ T6285] netlink: 'syz.0.76': attribute type 1 has an invalid length. [ 100.418298][ T6285] netlink: 'syz.0.76': attribute type 3 has an invalid length. [ 100.426005][ T6285] netlink: 224 bytes leftover after parsing attributes in process `syz.0.76'. [ 100.437734][ T6285] program syz.0.76 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.448327][ T6285] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 100.458735][ T6285] overlayfs: missing 'lowerdir' [ 101.170990][ T6291] tipc: Started in network mode [ 101.176007][ T6291] tipc: Node identity 4, cluster identity 4711 [ 101.182399][ T6291] tipc: Node number set to 4 [ 101.619979][ T6306] FAULT_INJECTION: forcing a failure. [ 101.619979][ T6306] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.634401][ T6306] CPU: 0 UID: 0 PID: 6306 Comm: syz.4.81 Not tainted syzkaller #0 PREEMPT(full) [ 101.634425][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.634435][ T6306] Call Trace: [ 101.634440][ T6306] [ 101.634444][ T6306] dump_stack_lvl+0x16c/0x1f0 [ 101.634463][ T6306] should_fail_ex+0x512/0x640 [ 101.634482][ T6306] _copy_to_user+0x32/0xd0 [ 101.634499][ T6306] simple_read_from_buffer+0xcb/0x170 [ 101.634516][ T6306] proc_fail_nth_read+0x197/0x240 [ 101.634528][ T6306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.634540][ T6306] ? rw_verify_area+0xcf/0x6c0 [ 101.634552][ T6306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.634563][ T6306] vfs_read+0x1e4/0xcf0 [ 101.634577][ T6306] ? __pfx___mutex_lock+0x10/0x10 [ 101.634594][ T6306] ? __pfx_vfs_read+0x10/0x10 [ 101.634611][ T6306] ? __fget_files+0x20e/0x3c0 [ 101.634630][ T6306] ksys_read+0x12a/0x250 [ 101.634644][ T6306] ? __pfx_ksys_read+0x10/0x10 [ 101.634661][ T6306] do_syscall_64+0xcd/0xf80 [ 101.634677][ T6306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.634689][ T6306] RIP: 0033:0x7f8f2eb8e15c [ 101.634698][ T6306] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 101.634709][ T6306] RSP: 002b:00007f8f2cdf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.634719][ T6306] RAX: ffffffffffffffda RBX: 00007f8f2ede6090 RCX: 00007f8f2eb8e15c [ 101.634726][ T6306] RDX: 000000000000000f RSI: 00007f8f2cdf60a0 RDI: 000000000000000a [ 101.634732][ T6306] RBP: 00007f8f2cdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 101.634739][ T6306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.634745][ T6306] R13: 00007f8f2ede6128 R14: 00007f8f2ede6090 R15: 00007ffe258c1938 [ 101.634759][ T6306] [ 101.919186][ T6312] FAULT_INJECTION: forcing a failure. [ 101.919186][ T6312] name failslab, interval 1, probability 0, space 0, times 1 [ 102.048620][ T6312] CPU: 1 UID: 0 PID: 6312 Comm: syz.1.83 Not tainted syzkaller #0 PREEMPT(full) [ 102.048644][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.048653][ T6312] Call Trace: [ 102.048658][ T6312] [ 102.048665][ T6312] dump_stack_lvl+0x16c/0x1f0 [ 102.048692][ T6312] should_fail_ex+0x512/0x640 [ 102.048716][ T6312] ? fs_reclaim_acquire+0xae/0x150 [ 102.048743][ T6312] should_failslab+0xc2/0x120 [ 102.048768][ T6312] __kmalloc_noprof+0xeb/0x910 [ 102.048794][ T6312] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 102.048821][ T6312] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 102.048843][ T6312] tomoyo_realpath_from_path+0xc2/0x6e0 [ 102.048869][ T6312] ? tomoyo_profile+0x47/0x60 [ 102.048895][ T6312] tomoyo_path_number_perm+0x245/0x580 [ 102.048914][ T6312] ? tomoyo_path_number_perm+0x237/0x580 [ 102.048936][ T6312] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 102.048957][ T6312] ? find_held_lock+0x2b/0x80 [ 102.049003][ T6312] ? find_held_lock+0x2b/0x80 [ 102.049026][ T6312] ? hook_file_ioctl_common+0x144/0x410 [ 102.049056][ T6312] ? __fget_files+0x20e/0x3c0 [ 102.049085][ T6312] security_file_ioctl+0x9b/0x240 [ 102.049111][ T6312] __x64_sys_ioctl+0xb7/0x210 [ 102.049132][ T6312] do_syscall_64+0xcd/0xf80 [ 102.049155][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.049173][ T6312] RIP: 0033:0x7f18f8f8f749 [ 102.049185][ T6312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.049201][ T6312] RSP: 002b:00007f18f9d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.049218][ T6312] RAX: ffffffffffffffda RBX: 00007f18f91e5fa0 RCX: 00007f18f8f8f749 [ 102.049228][ T6312] RDX: 0000000000000000 RSI: 0000000080486402 RDI: 0000000000000003 [ 102.049238][ T6312] RBP: 00007f18f9d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 102.049248][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.049257][ T6312] R13: 00007f18f91e6038 R14: 00007f18f91e5fa0 R15: 00007fffc53b8768 [ 102.049280][ T6312] [ 102.050015][ T6312] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.639093][ T6322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84'. [ 103.046901][ T5827] block nbd0: Receive control failed (result -1) [ 104.056840][ T6343] atomic_op ffff88807ee21198 conn xmit_atomic 0000000000000000 [ 104.801571][ T5931] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 105.542083][ T5931] usb 1-1: string descriptor 0 read error: -22 [ 105.548464][ T5931] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 105.676603][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.764799][ T5931] usb 1-1: config 0 descriptor?? [ 105.782205][ T5931] usbtest 1-1:0.0: FX2 device [ 105.786884][ T5931] usbtest 1-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 105.880991][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 105.881010][ T30] audit: type=1400 audit(1766456889.154:262): avc: denied { create } for pid=6355 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.357437][ T5990] usb 1-1: USB disconnect, device number 4 [ 106.461727][ T6360] netlink: 'syz.1.95': attribute type 12 has an invalid length. [ 106.496508][ T30] audit: type=1400 audit(1766456889.794:263): avc: denied { connect } for pid=6355 comm="syz.1.95" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.563589][ T30] audit: type=1400 audit(1766456889.864:264): avc: denied { write } for pid=6355 comm="syz.1.95" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.966565][ T30] audit: type=1400 audit(1766456890.254:265): avc: denied { read write } for pid=6372 comm="syz.4.97" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 107.173591][ T30] audit: type=1400 audit(1766456890.254:266): avc: denied { open } for pid=6372 comm="syz.4.97" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 107.381159][ T30] audit: type=1400 audit(1766456890.344:267): avc: denied { ioctl } for pid=6372 comm="syz.4.97" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 107.406952][ T30] audit: type=1400 audit(1766456890.344:268): avc: denied { mount } for pid=6372 comm="syz.4.97" name="/" dev="ramfs" ino=11403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 107.429860][ T30] audit: type=1400 audit(1766456890.514:269): avc: denied { connect } for pid=6378 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.286642][ T30] audit: type=1400 audit(1766456891.484:270): avc: denied { map } for pid=6382 comm="syz.2.99" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 108.342025][ T5820] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.472068][ T30] audit: type=1400 audit(1766456891.484:271): avc: denied { read write } for pid=6382 comm="syz.2.99" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 108.627264][ T5820] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 108.647281][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.667403][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.713463][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 108.748185][ T5820] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 108.765038][ T5820] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 108.777640][ T5820] usb 1-1: Manufacturer: syz [ 108.888645][ T5820] usb 1-1: config 0 descriptor?? [ 109.159976][ T6401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.301354][ T6402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.424896][ T6401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.453001][ T6402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.487533][ T5820] usbhid 1-1:0.0: can't add hid device: -71 [ 109.494391][ T5820] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 109.529666][ T5820] usb 1-1: USB disconnect, device number 5 [ 109.909061][ T6415] ubi31: attaching mtd0 [ 109.941485][ T6415] ubi31: scanning is finished [ 110.168733][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 110.183239][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 111.090956][ T6415] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 111.134120][ T6415] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 111.174392][ T6415] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 111.241140][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 111.247872][ T30] audit: type=1400 audit(1766456894.514:275): avc: denied { write } for pid=6436 comm="syz.0.115" name="wireless" dev="proc" ino=4026533032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 112.067401][ T6415] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 112.157329][ T30] audit: type=1400 audit(1766456895.454:276): avc: denied { ioctl } for pid=6412 comm="syz.4.109" path="socket:[10563]" dev="sockfs" ino=10563 ioctlcmd=0x42d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.186495][ T6415] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 112.217043][ T6415] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 112.259984][ T6415] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2589007989 [ 112.327274][ T30] audit: type=1400 audit(1766456895.504:277): avc: denied { bind } for pid=6445 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.404908][ T6415] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 112.421211][ T6432] ubi31: background thread "ubi_bgt31d" started, PID 6432 [ 112.437439][ T6448] ubi: mtd0 is already attached to ubi31 [ 112.764737][ T30] audit: type=1400 audit(1766456896.064:278): avc: denied { create } for pid=6457 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.099833][ T30] audit: type=1400 audit(1766456896.194:279): avc: denied { setopt } for pid=6457 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.272079][ T6468] netlink: 'syz.3.122': attribute type 1 has an invalid length. [ 113.279772][ T6468] netlink: 'syz.3.122': attribute type 3 has an invalid length. [ 113.287510][ T6468] netlink: 224 bytes leftover after parsing attributes in process `syz.3.122'. [ 113.303080][ T6468] program syz.3.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.315239][ T6468] overlayfs: missing 'lowerdir' [ 113.657063][ T6467] loop6: detected capacity change from 0 to 2640 [ 113.692289][ T6467] buffer_io_error: 43 callbacks suppressed [ 113.692306][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.750445][ T6472] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 113.788292][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.799297][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.812751][ T6472] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 113.823712][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.016076][ T30] audit: type=1400 audit(1766456897.314:280): avc: denied { read append } for pid=6473 comm="syz.1.126" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.051602][ T6472] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 114.065330][ T30] audit: type=1400 audit(1766456897.344:281): avc: denied { open } for pid=6473 comm="syz.1.126" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.090427][ T6472] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 114.100808][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.104754][ T30] audit: type=1400 audit(1766456897.344:282): avc: denied { shutdown } for pid=6473 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.129386][ T6476] netlink: 40 bytes leftover after parsing attributes in process `syz.1.126'. [ 114.133226][ T6472] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 114.148732][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.155278][ T6472] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 114.193508][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 114.206870][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 114.352707][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.376561][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.654642][ T6482] netlink: 'syz.0.127': attribute type 33 has an invalid length. [ 114.662464][ T6482] netlink: 152 bytes leftover after parsing attributes in process `syz.0.127'. [ 115.353366][ T6467] ldm_validate_partition_table(): Disk read failed. [ 115.360029][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.420516][ T6467] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.479935][ T30] audit: type=1400 audit(1766456898.744:283): avc: denied { read } for pid=6485 comm="syz.2.128" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 116.403150][ T6467] Dev loop6: unable to read RDB block 0 [ 116.494624][ T6467] loop6: unable to read partition table [ 116.519050][ T6467] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 116.541588][ T10] libceph: connect (1)[c::]:6789 error -101 [ 116.547655][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 116.555496][ T30] audit: type=1400 audit(1766456898.744:284): avc: denied { open } for pid=6485 comm="syz.2.128" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 116.581243][ T30] audit: type=1400 audit(1766456899.624:285): avc: denied { ioctl } for pid=6485 comm="syz.2.128" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 116.606706][ T89] libceph: connect (1)[c::]:6789 error -101 [ 116.621475][ T89] libceph: mon0 (1)[c::]:6789 connect error [ 116.710826][ T6490] ceph: No mds server is up or the cluster is laggy [ 116.711825][ T6488] ceph: No mds server is up or the cluster is laggy [ 116.771020][ T30] audit: type=1400 audit(1766456899.844:286): avc: denied { ioctl } for pid=6493 comm="syz.0.130" path="socket:[10702]" dev="sockfs" ino=10702 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.801455][ T30] audit: type=1400 audit(1766456899.844:287): avc: denied { write } for pid=6493 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.828319][ T89] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 117.133563][ T30] audit: type=1400 audit(1766456900.434:288): avc: denied { map } for pid=6500 comm="syz.4.131" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.244983][ T6504] ubi: mtd0 is already attached to ubi31 [ 117.395583][ T30] audit: type=1400 audit(1766456900.694:289): avc: denied { ioctl } for pid=6500 comm="syz.4.131" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.423356][ T6508] warning: `syz.4.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.551188][ T89] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 117.613402][ T89] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 117.650953][ T89] usb 1-1: config 0 interface 0 has no altsetting 0 [ 117.659971][ T89] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.669486][ T89] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 117.697247][ T89] usb 1-1: Product: syz [ 117.730972][ T89] usb 1-1: Manufacturer: syz [ 117.763696][ T89] usb 1-1: SerialNumber: syz [ 117.788835][ T89] usb 1-1: config 0 descriptor?? [ 117.814043][ T89] usb 1-1: selecting invalid altsetting 0 [ 118.016107][ T6494] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 118.334401][ T30] audit: type=1400 audit(1766456901.634:290): avc: denied { create } for pid=6514 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 118.497316][ T89] usb 1-1: USB disconnect, device number 6 [ 118.562054][ T6523] netlink: 'syz.4.135': attribute type 1 has an invalid length. [ 118.569679][ T6523] netlink: 'syz.4.135': attribute type 3 has an invalid length. [ 118.577506][ T6523] netlink: 224 bytes leftover after parsing attributes in process `syz.4.135'. [ 118.587579][ T6523] program syz.4.135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.597139][ T6523] overlayfs: missing 'lowerdir' [ 118.710653][ T6527] xt_ecn: cannot match TCP bits for non-tcp packets [ 119.055945][ T30] audit: type=1400 audit(1766456901.764:291): avc: denied { setopt } for pid=6522 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.086662][ T30] audit: type=1400 audit(1766456902.164:292): avc: denied { create } for pid=6522 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.093891][ T6529] tipc: Started in network mode [ 119.110183][ T30] audit: type=1400 audit(1766456902.234:293): avc: denied { bind } for pid=6522 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.113497][ T6529] tipc: Node identity 4, cluster identity 4711 [ 119.136875][ T6529] tipc: Node number set to 4 [ 119.215374][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 119.573525][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 120.310970][ T5990] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.502250][ T5990] usb 2-1: Using ep0 maxpacket: 8 [ 120.519016][ T6551] ubi: mtd0 is already attached to ubi31 [ 120.713086][ T5990] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 120.722624][ T5990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.730615][ T5990] usb 2-1: Product: syz [ 120.744910][ T5990] usb 2-1: Manufacturer: syz [ 120.759641][ T5990] usb 2-1: SerialNumber: syz [ 120.871161][ T5990] usb 2-1: config 0 descriptor?? [ 120.893398][ T5990] gspca_main: se401-2.14.0 probing 047d:5003 [ 120.974558][ T6555] x_tables: ip_tables: osf match: only valid for protocol 6 [ 122.170663][ T5990] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 122.201120][ T5990] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 122.229463][ T5990] usb 2-1: USB disconnect, device number 3 [ 122.258667][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 122.258683][ T30] audit: type=1400 audit(1766456905.554:296): avc: denied { append } for pid=6564 comm="syz.1.147" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 122.427552][ T30] audit: type=1400 audit(1766456905.724:297): avc: denied { bind } for pid=6564 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.537722][ T6569] netlink: 'syz.2.148': attribute type 1 has an invalid length. [ 122.545466][ T6569] netlink: 'syz.2.148': attribute type 3 has an invalid length. [ 122.553159][ T6569] netlink: 224 bytes leftover after parsing attributes in process `syz.2.148'. [ 122.568258][ T6569] program syz.2.148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.579917][ T6569] overlayfs: missing 'lowerdir' [ 122.895572][ T30] audit: type=1400 audit(1766456905.754:298): avc: denied { listen } for pid=6564 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.140994][ T30] audit: type=1400 audit(1766456907.434:299): avc: denied { create } for pid=6588 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.381225][ T30] audit: type=1400 audit(1766456907.434:300): avc: denied { ioctl } for pid=6588 comm="syz.4.154" path="socket:[11086]" dev="sockfs" ino=11086 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.763625][ T10] libceph: connect (1)[c::]:6789 error -101 [ 124.883205][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 125.063698][ T10] libceph: connect (1)[c::]:6789 error -101 [ 125.074007][ T6593] ceph: No mds server is up or the cluster is laggy [ 125.086783][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 125.160697][ T5990] libceph: connect (1)[c::]:6789 error -101 [ 125.190518][ T6598] ceph: No mds server is up or the cluster is laggy [ 125.247550][ T5990] libceph: mon0 (1)[c::]:6789 connect error [ 125.407023][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 125.512162][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 125.967428][ T30] audit: type=1400 audit(1766456909.264:301): avc: denied { map } for pid=6575 comm="syz.3.151" path="socket:[11108]" dev="sockfs" ino=11108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 126.422443][ T6623] infiniband !yz!: set active [ 126.427206][ T6623] infiniband !yz!: added team_slave_0 [ 126.434920][ T6623] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 126.436515][ T6623] infiniband !yz!: Couldn't open port 1 [ 126.712040][ T6623] RDS/IB: !yz!: added [ 126.717523][ T6623] smc: adding ib device !yz! with port count 1 [ 126.723914][ T6623] smc: ib device !yz! port 1 has no pnetid [ 127.445201][ T6645] loop6: detected capacity change from 0 to 2640 [ 127.452096][ T6645] buffer_io_error: 6 callbacks suppressed [ 127.452109][ T6645] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.540510][ T6645] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.637749][ T6645] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.672161][ T6645] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.691762][ T6649] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 127.738144][ T6649] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 127.740317][ T6645] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.810023][ T6659] No control pipe specified [ 128.091186][ T6645] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.104606][ T6649] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 128.114911][ T6645] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.119047][ T6649] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 128.444350][ T6649] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 128.454617][ T6649] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 128.817940][ T6645] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.842549][ T6645] ldm_validate_partition_table(): Disk read failed. [ 128.857423][ T6645] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.896282][ T6645] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.989746][ T6672] ubi: mtd0 is already attached to ubi31 [ 129.125147][ T6645] Dev loop6: unable to read RDB block 0 [ 129.236893][ T6645] loop6: unable to read partition table [ 129.323952][ T30] audit: type=1400 audit(1766456912.624:302): avc: denied { ioctl } for pid=6673 comm="syz.1.173" path="socket:[12487]" dev="sockfs" ino=12487 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.365146][ T6645] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 130.589835][ T30] audit: type=1400 audit(1766456913.884:303): avc: denied { ioctl } for pid=6683 comm="syz.3.176" path="socket:[12492]" dev="sockfs" ino=12492 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.658302][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 130.669033][ T6689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.178'. [ 131.034554][ T30] audit: type=1400 audit(1766456914.084:304): avc: denied { ioctl } for pid=6688 comm="syz.0.178" path="socket:[12508]" dev="sockfs" ino=12508 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 131.163490][ T6697] Cannot find add_set index 65532 as target [ 131.973245][ T5928] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.121261][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 132.141013][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 132.196320][ T5928] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 132.401593][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.407946][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.667556][ T5928] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 132.686889][ T5928] usb 2-1: Product: syz [ 132.694738][ T5928] usb 2-1: Manufacturer: syz [ 132.709695][ T5928] usb 2-1: SerialNumber: syz [ 132.739169][ T5928] usb 2-1: config 0 descriptor?? [ 132.782417][ T5928] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 133.823607][ T5928] gspca_zc3xx: reg_w_i err -71 [ 133.828454][ T5928] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 133.911913][ T6722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.186'. [ 133.951029][ T5928] usb 2-1: USB disconnect, device number 4 [ 133.989343][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'. [ 134.819009][ T6735] input: syz0 as /devices/virtual/input/input5 [ 135.276528][ T30] audit: type=1400 audit(1766456918.574:305): avc: denied { setattr } for pid=6739 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 135.350829][ T30] audit: type=1400 audit(1766456918.594:306): avc: denied { name_bind } for pid=6739 comm="syz.1.190" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 135.401139][ T30] audit: type=1400 audit(1766456918.674:307): avc: denied { read } for pid=6745 comm="syz.0.192" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 135.451160][ T30] audit: type=1400 audit(1766456918.674:308): avc: denied { open } for pid=6745 comm="syz.0.192" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 135.475548][ T30] audit: type=1400 audit(1766456918.674:309): avc: denied { ioctl } for pid=6745 comm="syz.0.192" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 135.514243][ T6749] syzkaller0: entered promiscuous mode [ 135.519915][ T6749] syzkaller0: entered allmulticast mode [ 136.455070][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 136.488846][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 136.552829][ T6767] Cannot find add_set index 65532 as target [ 137.046995][ T6765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.198'. [ 137.159105][ T6763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.198'. [ 137.203829][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 137.282321][ T5990] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 137.298453][ T30] audit: type=1400 audit(1766456920.574:310): avc: denied { map } for pid=6772 comm="syz.0.199" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 137.323253][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 137.325017][ T6765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.198'. [ 137.332607][ T6763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.198'. [ 137.681355][ T5990] usb 5-1: Using ep0 maxpacket: 32 [ 137.688144][ T5990] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 137.700965][ T5990] usb 5-1: config 0 has no interface number 0 [ 137.723472][ T5990] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 137.770907][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.800710][ T5990] usb 5-1: Product: syz [ 137.818024][ T5990] usb 5-1: Manufacturer: syz [ 138.301983][ T5990] usb 5-1: SerialNumber: syz [ 138.366392][ T5990] usb 5-1: config 0 descriptor?? [ 138.393266][ T5990] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 139.034633][ T5990] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 139.072017][ T5990] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 139.539117][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 139.547612][ T5990] usb 5-1: USB disconnect, device number 3 [ 139.602676][ T5990] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 139.632520][ T6800] v: renamed from veth0_vlan [ 139.642978][ T30] audit: type=1400 audit(1766456922.944:311): avc: denied { getopt } for pid=6808 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.706859][ T5990] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 139.731973][ T5990] quatech2 5-1:0.51: device disconnected [ 140.809095][ T30] audit: type=1400 audit(1766456924.104:312): avc: denied { write } for pid=6822 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 140.865208][ T30] audit: type=1400 audit(1766456924.164:313): avc: denied { append } for pid=6822 comm="syz.3.211" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.881165][ T6831] Cannot find add_set index 1 as target [ 141.448886][ T30] audit: type=1400 audit(1766456924.744:314): avc: denied { map } for pid=6837 comm="syz.2.214" path="socket:[13681]" dev="sockfs" ino=13681 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.551307][ T6838] "syz.2.214" (6838) uses obsolete ecb(arc4) skcipher [ 141.659976][ T30] audit: type=1400 audit(1766456924.744:315): avc: denied { read } for pid=6837 comm="syz.2.214" path="socket:[13681]" dev="sockfs" ino=13681 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.815593][ T6861] FAULT_INJECTION: forcing a failure. [ 142.815593][ T6861] name failslab, interval 1, probability 0, space 0, times 0 [ 142.828394][ T6861] CPU: 0 UID: 0 PID: 6861 Comm: syz.3.218 Not tainted syzkaller #0 PREEMPT(full) [ 142.828416][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.828425][ T6861] Call Trace: [ 142.828431][ T6861] [ 142.828437][ T6861] dump_stack_lvl+0x16c/0x1f0 [ 142.828463][ T6861] should_fail_ex+0x512/0x640 [ 142.828489][ T6861] ? fs_reclaim_acquire+0xae/0x150 [ 142.828517][ T6861] should_failslab+0xc2/0x120 [ 142.828540][ T6861] __kmalloc_noprof+0xeb/0x910 [ 142.828568][ T6861] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 142.828597][ T6861] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 142.828620][ T6861] tomoyo_realpath_from_path+0xc2/0x6e0 [ 142.828647][ T6861] ? tomoyo_profile+0x47/0x60 [ 142.828674][ T6861] tomoyo_path_number_perm+0x245/0x580 [ 142.828694][ T6861] ? tomoyo_path_number_perm+0x237/0x580 [ 142.828717][ T6861] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.828739][ T6861] ? find_held_lock+0x2b/0x80 [ 142.828788][ T6861] ? find_held_lock+0x2b/0x80 [ 142.828814][ T6861] ? hook_file_ioctl_common+0x144/0x410 [ 142.828847][ T6861] ? __fget_files+0x20e/0x3c0 [ 142.828876][ T6861] security_file_ioctl+0x9b/0x240 [ 142.828900][ T6861] __x64_sys_ioctl+0xb7/0x210 [ 142.828928][ T6861] do_syscall_64+0xcd/0xf80 [ 142.828953][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.828972][ T6861] RIP: 0033:0x7f1736b8f749 [ 142.828986][ T6861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.829002][ T6861] RSP: 002b:00007f1737999038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.829019][ T6861] RAX: ffffffffffffffda RBX: 00007f1736de6090 RCX: 00007f1736b8f749 [ 142.829030][ T6861] RDX: 0000200000000280 RSI: 0000000000008922 RDI: 0000000000000007 [ 142.829041][ T6861] RBP: 00007f1737999090 R08: 0000000000000000 R09: 0000000000000000 [ 142.829051][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.829061][ T6861] R13: 00007f1736de6128 R14: 00007f1736de6090 R15: 00007fffbff46628 [ 142.829085][ T6861] [ 142.829131][ T6861] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.590989][ T5931] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 143.693636][ T5932] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.723245][ T89] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.791030][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 143.810615][ T5931] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 143.826800][ T5931] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 143.840999][ T5931] usb 3-1: Product: syz [ 143.860966][ T5931] usb 3-1: Manufacturer: syz [ 143.871328][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 143.881095][ T5931] usb 3-1: SerialNumber: syz [ 143.892949][ T6887] can0: slcan on ttyS3. [ 143.992914][ T89] usb 1-1: Using ep0 maxpacket: 32 [ 143.999053][ T5932] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 144.002230][ T89] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 144.017362][ T89] usb 1-1: config 0 has no interface number 0 [ 144.018610][ T5931] usb 3-1: config 0 descriptor?? [ 144.025120][ T89] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 144.552352][ T5932] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 144.560602][ T5932] usb 4-1: Product: syz [ 144.571734][ T5931] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 144.580264][ T5932] usb 4-1: Manufacturer: syz [ 144.584913][ T5932] usb 4-1: SerialNumber: syz [ 144.610323][ T5932] usb 4-1: config 0 descriptor?? [ 144.618895][ T89] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 144.634213][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.644065][ T5485] v: left promiscuous mode [ 144.650568][ T89] usb 1-1: Product: syz [ 144.660916][ T89] usb 1-1: Manufacturer: syz [ 144.665910][ T6882] can0 (unregistered): slcan off ttyS3. [ 144.688508][ T5932] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 144.715569][ T5485] v: entered promiscuous mode [ 144.730501][ T89] usb 1-1: SerialNumber: syz [ 144.854468][ T89] usb 1-1: config 0 descriptor?? [ 145.052521][ T6868] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 145.323152][ T5931] gspca_zc3xx: reg_w_i err -71 [ 145.329559][ T5931] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 145.350993][ T5931] usb 3-1: USB disconnect, device number 3 [ 145.385026][ T6868] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 145.431962][ T5932] gspca_zc3xx: reg_w_i err -71 [ 145.442024][ T5932] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 145.472270][ T5932] usb 4-1: USB disconnect, device number 5 [ 145.999556][ T89] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 146.019648][ T89] asix 1-1:0.188: probe with driver asix failed with error -61 [ 147.378248][ T89] usb 1-1: USB disconnect, device number 7 [ 147.759266][ T6937] Cannot find add_set index 65532 as target [ 148.475378][ T30] audit: type=1400 audit(1766456931.774:316): avc: denied { ioctl } for pid=6931 comm="syz.2.233" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 148.588393][ T30] audit: type=1400 audit(1766456931.884:317): avc: denied { set_context_mgr } for pid=6946 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 149.258999][ T6956] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.476934][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.239'. [ 149.485953][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.239'. [ 150.519734][ T5980] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.533876][ T5990] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 150.633742][ T6976] tipc: Started in network mode [ 150.638732][ T6976] tipc: Node identity 4, cluster identity 4711 [ 150.645958][ T6976] tipc: Node number set to 4 [ 150.690936][ T5980] usb 3-1: Using ep0 maxpacket: 8 [ 150.699447][ T5980] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 150.717392][ T5928] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.727005][ T5980] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 150.742256][ T5990] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 150.885861][ T5990] usb 5-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 150.902245][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 150.948221][ T5980] usb 3-1: Product: syz [ 150.948580][ T5928] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 150.993295][ T5928] usb 2-1: config 0 has no interface number 0 [ 150.995948][ T5980] usb 3-1: Manufacturer: syz [ 150.999462][ T5928] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 151.014741][ T5980] usb 3-1: SerialNumber: syz [ 151.021766][ T5990] usb 5-1: New USB device found, idVendor=0499, idProduct=103d, bcdDevice=ab.94 [ 151.023209][ T5928] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 151.040223][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.041632][ T5980] usb 3-1: config 0 descriptor?? [ 151.053829][ T5928] usb 2-1: Product: syz [ 151.058280][ T5928] usb 2-1: Manufacturer: syz [ 151.058280][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.058302][ T5990] usb 5-1: Product: syz [ 151.063283][ T5928] usb 2-1: SerialNumber: syz [ 151.073031][ T5990] usb 5-1: Manufacturer: syz [ 151.077946][ T5928] usb 2-1: config 0 descriptor?? [ 151.094187][ T5980] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 151.095256][ T6972] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 151.261440][ T5990] usb 5-1: SerialNumber: syz [ 151.571913][ T6972] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 151.743599][ T6967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.753533][ T6967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.762396][ T6967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.772000][ T6967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.780710][ T6967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.824891][ T6967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.835647][ T6967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.846522][ T30] audit: type=1400 audit(1766456935.144:318): avc: denied { name_bind } for pid=6985 comm="syz.3.247" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 151.869945][ T6967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.879436][ T6967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.896422][ T6967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.914747][ T30] audit: type=1400 audit(1766456935.214:319): avc: denied { read } for pid=6985 comm="syz.3.247" dev="sockfs" ino=14038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.939466][ T5990] usb 5-1: USB disconnect, device number 4 [ 152.132647][ T6989] syz.0.248 uses obsolete (PF_INET,SOCK_PACKET) [ 152.142682][ T6989] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 152.310292][ T5928] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 152.330004][ T5928] asix 2-1:0.188: probe with driver asix failed with error -32 [ 152.371126][ T5980] gspca_zc3xx: reg_w_i err -110 [ 152.376055][ T5980] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 152.501558][ T5928] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 152.592245][ T6999] ubi: mtd0 is already attached to ubi31 [ 152.741310][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 152.811277][ T5928] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 152.833654][ T5928] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 152.854569][ T5928] usb 1-1: Product: syz [ 152.866079][ T5928] usb 1-1: Manufacturer: syz [ 152.874474][ T5928] usb 1-1: SerialNumber: syz [ 152.890507][ T5928] usb 1-1: config 0 descriptor?? [ 153.113312][ T5928] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 153.358887][ T89] usb 2-1: USB disconnect, device number 5 [ 153.473226][ T7009] overlayfs: failed to resolve './file0': -2 [ 154.020393][ T5879] usb 3-1: USB disconnect, device number 4 [ 154.391266][ T89] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 154.544277][ T5928] gspca_zc3xx: reg_w_i err -110 [ 154.568469][ T5928] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 154.712565][ T89] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 154.722575][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.792761][ T89] usb 4-1: config 0 descriptor?? [ 155.035631][ T89] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 155.168022][ T30] audit: type=1400 audit(1766456938.464:320): avc: denied { mount } for pid=7030 comm="syz.4.259" name="/" dev="autofs" ino=14149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 155.278478][ T89] usb 4-1: USB disconnect, device number 6 [ 155.411913][ T5990] usb 1-1: USB disconnect, device number 8 [ 155.442168][ T7038] 9p: Bad value for 'wfdno' [ 157.170824][ T5990] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 157.241321][ T5928] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 157.449977][ T7064] FAULT_INJECTION: forcing a failure. [ 157.449977][ T7064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.463070][ T7064] CPU: 0 UID: 0 PID: 7064 Comm: syz.0.269 Not tainted syzkaller #0 PREEMPT(full) [ 157.463085][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.463091][ T7064] Call Trace: [ 157.463096][ T7064] [ 157.463100][ T7064] dump_stack_lvl+0x16c/0x1f0 [ 157.463118][ T7064] should_fail_ex+0x512/0x640 [ 157.463138][ T7064] _copy_to_user+0x32/0xd0 [ 157.463155][ T7064] simple_read_from_buffer+0xcb/0x170 [ 157.463173][ T7064] proc_fail_nth_read+0x197/0x240 [ 157.463186][ T7064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.463198][ T7064] ? rw_verify_area+0xcf/0x6c0 [ 157.463210][ T7064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.463221][ T7064] vfs_read+0x1e4/0xcf0 [ 157.463236][ T7064] ? __pfx___mutex_lock+0x10/0x10 [ 157.463252][ T7064] ? __pfx_vfs_read+0x10/0x10 [ 157.463269][ T7064] ? __fget_files+0x20e/0x3c0 [ 157.463289][ T7064] ksys_read+0x12a/0x250 [ 157.463302][ T7064] ? __pfx_ksys_read+0x10/0x10 [ 157.463316][ T7064] ? fput+0x70/0xf0 [ 157.463326][ T7064] do_syscall_64+0xcd/0xf80 [ 157.463342][ T7064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.463353][ T7064] RIP: 0033:0x7f47b958e15c [ 157.463362][ T7064] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 157.463372][ T7064] RSP: 002b:00007f47ba3b9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.463382][ T7064] RAX: ffffffffffffffda RBX: 00007f47b97e5fa0 RCX: 00007f47b958e15c [ 157.463389][ T7064] RDX: 000000000000000f RSI: 00007f47ba3b90a0 RDI: 0000000000000005 [ 157.463395][ T7064] RBP: 00007f47ba3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 157.463401][ T7064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.463407][ T7064] R13: 00007f47b97e6038 R14: 00007f47b97e5fa0 R15: 00007ffe6e49d3d8 [ 157.463421][ T7064] [ 157.654377][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 157.677178][ T7062] netlink: 76 bytes leftover after parsing attributes in process `syz.1.268'. [ 157.691260][ T5879] IPVS: starting estimator thread 0... [ 157.694312][ T5990] usb 3-1: Using ep0 maxpacket: 32 [ 157.705111][ T5990] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 157.713524][ T5990] usb 3-1: config 0 has no interface number 0 [ 157.719613][ T5990] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 157.734783][ T5990] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 157.744834][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.752853][ T5990] usb 3-1: Product: syz [ 157.757044][ T5990] usb 3-1: Manufacturer: syz [ 157.761662][ T5990] usb 3-1: SerialNumber: syz [ 157.769981][ T5990] usb 3-1: config 0 descriptor?? [ 157.777788][ T7052] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.821141][ T7067] IPVS: using max 48 ests per chain, 115200 per kthread [ 157.832965][ T5928] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 157.842139][ T5928] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 157.867300][ T5928] usb 4-1: Product: syz [ 157.974959][ T5928] usb 4-1: Manufacturer: syz [ 157.979802][ T5928] usb 4-1: SerialNumber: syz [ 158.000164][ T5928] usb 4-1: config 0 descriptor?? [ 158.010011][ T7052] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.559941][ T5928] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 158.686777][ T30] audit: type=1400 audit(1766456941.984:321): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 159.151615][ T5990] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 159.164079][ T5990] asix 3-1:0.188: probe with driver asix failed with error -32 [ 159.402108][ T30] audit: type=1400 audit(1766456942.704:322): avc: denied { shutdown } for pid=7079 comm="syz.0.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.472007][ T30] audit: type=1400 audit(1766456942.704:323): avc: denied { connect } for pid=7079 comm="syz.0.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.523562][ T30] audit: type=1400 audit(1766456942.704:324): avc: denied { name_connect } for pid=7079 comm="syz.0.273" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 159.761161][ T5928] gspca_zc3xx: reg_w_i err -110 [ 159.770277][ T5928] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 160.270684][ T5990] usb 3-1: USB disconnect, device number 5 [ 160.851197][ T5980] usb 4-1: USB disconnect, device number 7 [ 161.001312][ T5931] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 161.107049][ T7109] Cannot find add_set index 65532 as target [ 161.671976][ T7110] netlink: 72 bytes leftover after parsing attributes in process `syz.4.280'. [ 161.770653][ T30] audit: type=1400 audit(1766456945.064:325): avc: denied { ioctl } for pid=7105 comm="syz.4.280" path="socket:[14657]" dev="sockfs" ino=14657 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.812940][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 162.052440][ T5931] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 162.070379][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.078923][ T5931] usb 2-1: Product: syz [ 162.083640][ T5931] usb 2-1: Manufacturer: syz [ 162.088270][ T5931] usb 2-1: SerialNumber: syz [ 162.187024][ T5931] usb 2-1: config 0 descriptor?? [ 162.896081][ T30] audit: type=1400 audit(1766456946.194:326): avc: denied { setopt } for pid=7116 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.921068][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 163.050968][ T30] audit: type=1400 audit(1766456946.224:327): avc: denied { connect } for pid=7116 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.131268][ T7099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.204197][ T7099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.273037][ T5931] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 163.306621][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 163.318643][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 163.328403][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 163.338231][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 163.347885][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 163.908742][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 163.918028][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 164.037087][ T5931] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 164.181179][ T5820] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 164.340928][ T5820] usb 4-1: Using ep0 maxpacket: 32 [ 164.349851][ T5820] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 164.378353][ T5820] usb 4-1: config 0 has no interface number 0 [ 164.392167][ T5820] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 164.451140][ T5820] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 164.463371][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.494590][ T5931] usb 2-1: [UEAGLE-ATM] interface 1 not found [ 164.500692][ T5931] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 164.519676][ T5820] usb 4-1: Product: syz [ 164.551789][ T5820] usb 4-1: Manufacturer: syz [ 164.563657][ T5820] usb 4-1: SerialNumber: syz [ 164.570387][ T5931] usb 2-1: USB disconnect, device number 6 [ 164.577947][ T30] audit: type=1400 audit(1766456947.874:328): avc: denied { read } for pid=7166 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.605564][ T5820] usb 4-1: config 0 descriptor?? [ 164.629133][ T7157] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 164.658475][ T30] audit: type=1400 audit(1766456947.924:329): avc: denied { write } for pid=7166 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.784209][ T30] audit: type=1400 audit(1766456948.074:330): avc: denied { ioctl } for pid=7173 comm="syz.2.293" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 164.926041][ T7157] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 165.294493][ T7190] netlink: 256 bytes leftover after parsing attributes in process `syz.4.295'. [ 165.314180][ T7190] netlink: 72 bytes leftover after parsing attributes in process `syz.4.295'. [ 165.614934][ T5820] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 165.630248][ T5820] asix 4-1:0.188: probe with driver asix failed with error -32 [ 166.591031][ T5931] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 166.750984][ T5931] usb 3-1: Invalid ep0 maxpacket: 64 [ 166.881277][ T5931] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 166.957131][ T5927] usb 4-1: USB disconnect, device number 8 [ 167.195746][ T7228] mkiss: ax0: crc mode is auto. [ 167.288622][ T5931] usb 3-1: Invalid ep0 maxpacket: 64 [ 167.294954][ T5931] usb usb3-port1: attempt power cycle [ 167.484599][ T30] audit: type=1400 audit(1766456950.784:331): avc: denied { read } for pid=7231 comm="syz.0.306" dev="sockfs" ino=15782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 167.512953][ T30] audit: type=1400 audit(1766456950.814:332): avc: denied { setcheckreqprot } for pid=7231 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 167.701896][ T5931] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 167.854109][ T5931] usb 3-1: Invalid ep0 maxpacket: 64 [ 168.084285][ T7237] ntfs3(nullb0): Primary boot signature is not NTFS. [ 168.092352][ T7237] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 168.181249][ T5931] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 168.196533][ T30] audit: type=1400 audit(1766456951.494:333): avc: denied { bind } for pid=7236 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.474078][ T5927] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 168.486400][ T5931] usb 3-1: Invalid ep0 maxpacket: 64 [ 168.502218][ T5931] usb usb3-port1: unable to enumerate USB device [ 168.701505][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 168.899776][ T5927] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 168.945326][ T5927] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x2 has an invalid bInterval 248, changing to 11 [ 169.005647][ T5927] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.023377][ T5927] usb 4-1: New USB device found, idVendor=0738, idProduct=1713, bcdDevice= 0.00 [ 169.041044][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.196935][ T7254] ntfs3(nullb0): Primary boot signature is not NTFS. [ 169.206394][ T7254] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 169.250164][ T5927] usb 4-1: config 0 descriptor?? [ 169.573761][ T30] audit: type=1400 audit(1766456952.874:334): avc: denied { mount } for pid=7260 comm="syz.0.316" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 169.631024][ T30] audit: type=1400 audit(1766456952.904:335): avc: denied { unmount } for pid=7260 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 169.662335][ T5931] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 169.676610][ T5927] saitek 0003:0738:1713.0002: hidraw0: USB HID v0.00 Device [HID 0738:1713] on usb-dummy_hcd.3-1/input0 [ 169.850944][ T5931] usb 5-1: Using ep0 maxpacket: 32 [ 169.862913][ T5931] usb 5-1: config 32 has an invalid interface number: 85 but max is 0 [ 169.886119][ T5931] usb 5-1: config 32 has no interface number 0 [ 169.900307][ T5931] usb 5-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.916245][ T5931] usb 5-1: config 32 interface 85 has no altsetting 0 [ 169.927863][ T5931] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 169.938669][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.963123][ T5931] usb 5-1: Product: syz [ 169.967297][ T5931] usb 5-1: Manufacturer: syz [ 169.973207][ T5931] usb 5-1: SerialNumber: syz [ 170.070228][ T30] audit: type=1400 audit(1766456953.364:336): avc: denied { ioctl } for pid=7280 comm="syz.2.320" path="socket:[15931]" dev="sockfs" ino=15931 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.098507][ T7281] 8021q: VLANs not supported on wg1 [ 170.191208][ T5894] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 170.527615][ T5931] appletouch 5-1:32.85: Failed to request geyser raw mode [ 170.559846][ T5931] appletouch 5-1:32.85: probe with driver appletouch failed with error -5 [ 170.589880][ T5931] usb 5-1: USB disconnect, device number 5 [ 170.915782][ T10] usb 4-1: USB disconnect, device number 9 [ 170.998773][ T7295] ptrace attach of ""[7296] was attempted by "./syz-executor exec"[7295] [ 171.185719][ T7302] can0: slcan on ttyS3. [ 171.427472][ T30] audit: type=1400 audit(1766456954.724:337): avc: denied { write } for pid=7303 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 171.588188][ T30] audit: type=1400 audit(1766456954.754:338): avc: denied { getopt } for pid=7303 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 172.456329][ T7330] FAULT_INJECTION: forcing a failure. [ 172.456329][ T7330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.469466][ T7330] CPU: 1 UID: 0 PID: 7330 Comm: syz.4.331 Not tainted syzkaller #0 PREEMPT(full) [ 172.469482][ T7330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.469489][ T7330] Call Trace: [ 172.469493][ T7330] [ 172.469498][ T7330] dump_stack_lvl+0x16c/0x1f0 [ 172.469517][ T7330] should_fail_ex+0x512/0x640 [ 172.469537][ T7330] _copy_from_user+0x2e/0xd0 [ 172.469555][ T7330] vmemdup_user+0x6b/0xe0 [ 172.469567][ T7330] setxattr_copy+0x148/0x210 [ 172.469592][ T7330] path_setxattrat+0x104/0x2a0 [ 172.469608][ T7330] ? __pfx_path_setxattrat+0x10/0x10 [ 172.469627][ T7330] ? ksys_write+0x190/0x250 [ 172.469652][ T7330] ? fput+0x70/0xf0 [ 172.469661][ T7330] ? ksys_write+0x1ac/0x250 [ 172.469674][ T7330] ? __pfx_ksys_write+0x10/0x10 [ 172.469689][ T7330] __x64_sys_setxattr+0xc6/0x140 [ 172.469705][ T7330] ? do_syscall_64+0x91/0xf80 [ 172.469720][ T7330] ? lockdep_hardirqs_on+0x7c/0x110 [ 172.469733][ T7330] do_syscall_64+0xcd/0xf80 [ 172.469748][ T7330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.469761][ T7330] RIP: 0033:0x7f8f2eb8f749 [ 172.469770][ T7330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.469780][ T7330] RSP: 002b:00007f8f2cdf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 172.469790][ T7330] RAX: ffffffffffffffda RBX: 00007f8f2ede6090 RCX: 00007f8f2eb8f749 [ 172.469797][ T7330] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 00002000000000c0 [ 172.469803][ T7330] RBP: 00007f8f2cdf6090 R08: 0000000000000003 R09: 0000000000000000 [ 172.469809][ T7330] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 172.469815][ T7330] R13: 00007f8f2ede6128 R14: 00007f8f2ede6090 R15: 00007ffe258c1938 [ 172.469830][ T7330] [ 172.511584][ T5990] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 172.861140][ T7300] can0 (unregistered): slcan off ttyS3. [ 173.830929][ T5990] usb 1-1: Using ep0 maxpacket: 8 [ 173.848011][ T5990] usb 1-1: too many configurations: 79, using maximum allowed: 8 [ 173.863835][ T5990] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 173.877236][ T5990] usb 1-1: can't read configurations, error -61 [ 174.166469][ T5990] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 174.341841][ T5990] usb 1-1: Using ep0 maxpacket: 8 [ 174.351603][ T5990] usb 1-1: too many configurations: 79, using maximum allowed: 8 [ 174.382227][ T5990] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 174.389877][ T5990] usb 1-1: can't read configurations, error -61 [ 174.423761][ T5990] usb usb1-port1: attempt power cycle [ 174.558225][ T7354] netlink: 40 bytes leftover after parsing attributes in process `syz.4.336'. [ 174.579880][ T7353] FAULT_INJECTION: forcing a failure. [ 174.579880][ T7353] name failslab, interval 1, probability 0, space 0, times 0 [ 174.656302][ T7353] CPU: 1 UID: 0 PID: 7353 Comm: syz.1.337 Not tainted syzkaller #0 PREEMPT(full) [ 174.656327][ T7353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.656336][ T7353] Call Trace: [ 174.656346][ T7353] [ 174.656352][ T7353] dump_stack_lvl+0x16c/0x1f0 [ 174.656378][ T7353] should_fail_ex+0x512/0x640 [ 174.656402][ T7353] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 174.656423][ T7353] should_failslab+0xc2/0x120 [ 174.656446][ T7353] kmem_cache_alloc_node_noprof+0x86/0x800 [ 174.656469][ T7353] ? __alloc_skb+0x156/0x410 [ 174.656500][ T7353] ? __alloc_skb+0x156/0x410 [ 174.656522][ T7353] __alloc_skb+0x156/0x410 [ 174.656546][ T7353] ? __pfx___alloc_skb+0x10/0x10 [ 174.656574][ T7353] ? __asan_memset+0x23/0x50 [ 174.656593][ T7353] tipc_buf_acquire+0x26/0xe0 [ 174.656610][ T7353] tipc_msg_build+0x853/0x1150 [ 174.656633][ T7353] ? __pfx_tipc_msg_build+0x10/0x10 [ 174.656661][ T7353] tipc_send_group_bcast+0x7cc/0xa50 [ 174.656692][ T7353] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 174.656713][ T7353] ? __lock_acquire+0x436/0x2890 [ 174.656736][ T7353] ? __pfx_woken_wake_function+0x10/0x10 [ 174.656770][ T7353] ? avc_has_perm_noaudit+0x117/0x3b0 [ 174.656801][ T7353] __tipc_sendmsg+0x4ab/0x1970 [ 174.656828][ T7353] ? avc_has_perm+0x144/0x1f0 [ 174.656855][ T7353] ? __pfx___tipc_sendmsg+0x10/0x10 [ 174.656880][ T7353] ? __lock_acquire+0x436/0x2890 [ 174.656919][ T7353] ? __local_bh_enable_ip+0xa4/0x120 [ 174.656946][ T7353] tipc_sendmsg+0x4f/0x70 [ 174.656972][ T7353] ____sys_sendmsg+0xa5d/0xc30 [ 174.656994][ T7353] ? copy_msghdr_from_user+0x10a/0x160 [ 174.657011][ T7353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.657036][ T7353] ? __pfx__kstrtoull+0x10/0x10 [ 174.657059][ T7353] ___sys_sendmsg+0x134/0x1d0 [ 174.657077][ T7353] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.657105][ T7353] ? find_held_lock+0x2b/0x80 [ 174.657144][ T7353] __sys_sendmmsg+0x200/0x420 [ 174.657164][ T7353] ? __pfx___sys_sendmmsg+0x10/0x10 [ 174.657188][ T7353] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 174.657220][ T7353] ? fput+0x70/0xf0 [ 174.657234][ T7353] ? ksys_write+0x1ac/0x250 [ 174.657254][ T7353] ? __pfx_ksys_write+0x10/0x10 [ 174.657277][ T7353] __x64_sys_sendmmsg+0x9c/0x100 [ 174.657293][ T7353] ? lockdep_hardirqs_on+0x7c/0x110 [ 174.657314][ T7353] do_syscall_64+0xcd/0xf80 [ 174.657336][ T7353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.657353][ T7353] RIP: 0033:0x7f18f8f8f749 [ 174.657367][ T7353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.657382][ T7353] RSP: 002b:00007f18f9d4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 174.657399][ T7353] RAX: ffffffffffffffda RBX: 00007f18f91e6090 RCX: 00007f18f8f8f749 [ 174.657410][ T7353] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000004 [ 174.657420][ T7353] RBP: 00007f18f9d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 174.657429][ T7353] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.657439][ T7353] R13: 00007f18f91e6128 R14: 00007f18f91e6090 R15: 00007fffc53b8768 [ 174.657467][ T7353] [ 174.999332][ T7357] loop6: detected capacity change from 0 to 2640 [ 175.006130][ T7357] buffer_io_error: 6 callbacks suppressed [ 175.006144][ T7357] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.051024][ T5990] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 175.071909][ T5990] usb 1-1: Using ep0 maxpacket: 8 [ 175.089434][ T5990] usb 1-1: too many configurations: 79, using maximum allowed: 8 [ 175.114788][ T7362] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 175.137267][ T5990] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 175.153545][ T5990] usb 1-1: can't read configurations, error -61 [ 175.169409][ T7357] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.205656][ T7357] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.253611][ T7362] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 175.331320][ T7357] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.358371][ T7362] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 175.372908][ T5894] usb 2-1: device descriptor read/64, error -110 [ 175.406421][ T7357] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.525942][ T7373] FAULT_INJECTION: forcing a failure. [ 175.525942][ T7373] name failslab, interval 1, probability 0, space 0, times 0 [ 175.538584][ T7373] CPU: 1 UID: 0 PID: 7373 Comm: syz.0.342 Not tainted syzkaller #0 PREEMPT(full) [ 175.538600][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.538606][ T7373] Call Trace: [ 175.538611][ T7373] [ 175.538615][ T7373] dump_stack_lvl+0x16c/0x1f0 [ 175.538633][ T7373] should_fail_ex+0x512/0x640 [ 175.538651][ T7373] ? kmem_cache_alloc_noprof+0x62/0x770 [ 175.538664][ T7373] should_failslab+0xc2/0x120 [ 175.538679][ T7373] kmem_cache_alloc_noprof+0x83/0x770 [ 175.538690][ T7373] ? getname_flags.part.0+0x4c/0x550 [ 175.538704][ T7373] ? getname_flags.part.0+0x4c/0x550 [ 175.538715][ T7373] getname_flags.part.0+0x4c/0x550 [ 175.538728][ T7373] getname_flags+0x93/0xf0 [ 175.538742][ T7373] path_setxattrat+0x27a/0x2a0 [ 175.538759][ T7373] ? __pfx_path_setxattrat+0x10/0x10 [ 175.538777][ T7373] ? ksys_write+0x190/0x250 [ 175.538801][ T7373] ? fput+0x70/0xf0 [ 175.538810][ T7373] ? ksys_write+0x1ac/0x250 [ 175.538823][ T7373] ? __pfx_ksys_write+0x10/0x10 [ 175.538839][ T7373] __x64_sys_setxattr+0xc6/0x140 [ 175.538855][ T7373] ? do_syscall_64+0x91/0xf80 [ 175.538869][ T7373] ? lockdep_hardirqs_on+0x7c/0x110 [ 175.538883][ T7373] do_syscall_64+0xcd/0xf80 [ 175.538897][ T7373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.538909][ T7373] RIP: 0033:0x7f47b958f749 [ 175.538919][ T7373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.538929][ T7373] RSP: 002b:00007f47ba3b9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 175.538940][ T7373] RAX: ffffffffffffffda RBX: 00007f47b97e5fa0 RCX: 00007f47b958f749 [ 175.538947][ T7373] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 00002000000000c0 [ 175.538953][ T7373] RBP: 00007f47ba3b9090 R08: 0000000000000003 R09: 0000000000000000 [ 175.538960][ T7373] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 175.538966][ T7373] R13: 00007f47b97e6038 R14: 00007f47b97e5fa0 R15: 00007ffe6e49d3d8 [ 175.538979][ T7373] [ 175.754549][ T7362] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 175.765541][ T7362] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 175.777840][ T7362] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 175.787773][ T7362] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 175.797787][ T7362] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 175.809644][ T7357] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.817762][ T7357] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.825911][ T7357] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.834044][ T7357] ldm_validate_partition_table(): Disk read failed. [ 175.840657][ T7357] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.850658][ T7357] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.858886][ T7357] Dev loop6: unable to read RDB block 0 [ 175.866294][ T7357] loop6: unable to read partition table [ 175.872489][ T7357] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 175.913606][ T5894] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 176.133581][ T5894] usb 2-1: device descriptor read/64, error -32 [ 176.312005][ T5894] usb usb2-port1: attempt power cycle [ 176.791282][ T5894] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 176.821179][ T5894] usb 2-1: device descriptor read/8, error -32 [ 177.011312][ T5894] raw-gadget.2 gadget.1: failed to queue resume event [ 177.413677][ T5894] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 177.481171][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 177.488465][ T5894] usb 2-1: device descriptor read/8, error -32 [ 177.611476][ T5894] raw-gadget.2 gadget.1: failed to queue suspend event [ 177.619016][ T5894] usb usb2-port1: unable to enumerate USB device [ 177.829121][ T30] audit: type=1400 audit(1766456961.034:339): avc: denied { setopt } for pid=7379 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 178.112101][ T7420] netlink: 'syz.2.351': attribute type 10 has an invalid length. [ 178.862353][ T30] audit: type=1400 audit(1766456962.164:340): avc: denied { ioctl } for pid=7428 comm="syz.0.352" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x4b4a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 178.960286][ T7296] raw-gadget.2 gadget.1: failed to queue disconnect event [ 179.032061][ T7434] ubi: mtd0 is already attached to ubi31 [ 179.580943][ T5931] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 179.590925][ T5990] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 179.744353][ T5931] usb 3-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config [ 179.761189][ T5990] usb 4-1: Using ep0 maxpacket: 16 [ 179.770496][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.785728][ T5990] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.871349][ T5990] usb 4-1: config 0 interface 0 has no altsetting 0 [ 179.879958][ T5931] usb 3-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 179.890689][ T5990] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 179.900498][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.910658][ T5990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.922401][ T7455] futex_wake_op: syz.0.357 tries to shift op by -1; fix this program [ 179.932970][ T5931] usb 3-1: config 0 descriptor?? [ 179.993677][ T5990] usb 4-1: config 0 descriptor?? [ 180.012138][ T5931] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 180.063446][ T7457] netlink: 68 bytes leftover after parsing attributes in process `syz.0.357'. [ 180.437485][ T7460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.448769][ T7460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.533587][ T30] audit: type=1400 audit(1766456963.694:341): avc: denied { write } for pid=7437 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 180.562223][ T30] audit: type=1400 audit(1766456963.704:342): avc: denied { read write } for pid=7437 comm="syz.2.356" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 180.587934][ T30] audit: type=1400 audit(1766456963.704:343): avc: denied { open } for pid=7437 comm="syz.2.356" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 180.613379][ T5990] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 181.499320][ T7466] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 181.509511][ T7466] macvtap1: entered allmulticast mode [ 181.514945][ T7466] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 181.526276][ T7466] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 181.533985][ T7466] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 182.611554][ T7480] netlink: 'syz.0.361': attribute type 30 has an invalid length. [ 182.838363][ T5927] usb 4-1: USB disconnect, device number 10 [ 182.874511][ T5880] usb 3-1: USB disconnect, device number 10 [ 183.158638][ T7493] ubi: mtd0 is already attached to ubi31 [ 183.486800][ T7494] bridge0: port 3(gretap0) entered blocking state [ 183.494068][ T7494] bridge0: port 3(gretap0) entered disabled state [ 183.503547][ T7494] gretap0: entered allmulticast mode [ 183.616743][ T7503] Cannot find add_set index 0 as target [ 183.667251][ T30] audit: type=1400 audit(1766456966.964:344): avc: denied { setopt } for pid=7499 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 183.703511][ T7494] gretap0: entered promiscuous mode [ 183.709611][ T7494] bridge0: port 3(gretap0) entered blocking state [ 183.716558][ T7494] bridge0: port 3(gretap0) entered forwarding state [ 183.797248][ T5880] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 184.117396][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 184.279683][ T5880] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 184.296528][ T5880] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 184.313039][ T7512] loop6: detected capacity change from 0 to 2640 [ 184.319857][ T7512] buffer_io_error: 6 callbacks suppressed [ 184.319867][ T7512] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.330880][ T5880] usb 4-1: Product: syz [ 184.337791][ T7512] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.356903][ T7512] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.364807][ T5880] usb 4-1: Manufacturer: syz [ 184.387520][ T5880] usb 4-1: SerialNumber: syz [ 184.404240][ T5880] usb 4-1: config 0 descriptor?? [ 184.431029][ T7512] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.463594][ T5880] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 184.473214][ T7512] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.509869][ T7512] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.715485][ T7512] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.809837][ T7513] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 184.854194][ T7512] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.870933][ T7513] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 184.942584][ T7512] ldm_validate_partition_table(): Disk read failed. [ 184.952503][ T7512] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.960994][ T7513] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 185.037864][ T7513] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 185.103480][ T7513] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 185.358621][ T7341] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 185.448243][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 185.467940][ T7512] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.480035][ T7512] Dev loop6: unable to read RDB block 0 [ 185.480034][ T7513] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 185.480123][ T7513] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 185.487026][ T7512] loop6: unable to read partition table [ 185.525089][ T7512] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 185.541444][ T5880] gspca_zc3xx: reg_w_i err -110 [ 185.547898][ T5880] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 185.563432][ T7513] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 185.595970][ T7341] usb 5-1: device descriptor read/64, error -32 [ 185.624142][ T7523] netlink: 'syz.2.375': attribute type 1 has an invalid length. [ 185.874648][ T7523] netlink: 'syz.2.375': attribute type 3 has an invalid length. [ 185.911400][ T7341] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 186.026850][ T7523] netlink: 224 bytes leftover after parsing attributes in process `syz.2.375'. [ 186.161963][ T7341] usb 5-1: Using ep0 maxpacket: 32 [ 186.171603][ T7341] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 186.189176][ T7341] usb 5-1: config 0 has no interface number 0 [ 186.208909][ T7341] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 186.228713][ T7341] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 186.238249][ T7341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.246806][ T7341] usb 5-1: Product: syz [ 186.251166][ T7341] usb 5-1: Manufacturer: syz [ 186.255799][ T7341] usb 5-1: SerialNumber: syz [ 186.264932][ T7341] usb 5-1: config 0 descriptor?? [ 186.273095][ T7518] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 187.432807][ T30] audit: type=1400 audit(1766456970.734:345): avc: denied { ioctl } for pid=7534 comm="syz.0.379" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 187.436210][ T5880] usb 4-1: USB disconnect, device number 11 [ 187.672756][ T7518] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 187.971517][ T30] audit: type=1400 audit(1766456971.124:346): avc: denied { execute } for pid=7539 comm="syz.1.380" path="/76/file1" dev="tmpfs" ino=417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 188.004460][ T7341] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 188.034952][ T7341] asix 5-1:0.188: probe with driver asix failed with error -61 [ 188.622832][ T30] audit: type=1400 audit(1766456971.924:347): avc: denied { mounton } for pid=7553 comm="syz.1.384" path="/proc/290/task" dev="proc" ino=17741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 188.650638][ T30] audit: type=1400 audit(1766456971.944:348): avc: denied { append } for pid=7553 comm="syz.1.384" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 188.678297][ T30] audit: type=1400 audit(1766456971.944:349): avc: denied { associate } for pid=7557 comm="syz.1.384" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 189.196663][ T30] audit: type=1400 audit(1766456972.494:350): avc: denied { create } for pid=7566 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 189.351170][ T7572] netlink: 'syz.0.388': attribute type 1 has an invalid length. [ 189.359677][ T7572] netlink: 'syz.0.388': attribute type 3 has an invalid length. [ 189.367683][ T7572] netlink: 224 bytes leftover after parsing attributes in process `syz.0.388'. [ 189.916078][ T5880] usb 5-1: USB disconnect, device number 7 [ 189.933674][ T30] audit: type=1400 audit(1766456973.234:351): avc: denied { create } for pid=7580 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 190.578565][ T7584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.391'. [ 190.587620][ T7584] netlink: 108 bytes leftover after parsing attributes in process `syz.0.391'. [ 190.601291][ T7584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.391'. [ 190.612831][ T7584] netlink: 108 bytes leftover after parsing attributes in process `syz.0.391'. [ 190.624807][ T7584] netlink: 84 bytes leftover after parsing attributes in process `syz.0.391'. [ 191.087720][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 191.090908][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 191.095290][ T5821] Bluetooth: hci4: command 0x0405 tx timeout [ 191.100062][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 191.106437][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 191.112416][ T30] audit: type=1400 audit(1766456973.864:352): avc: denied { kexec_image_load } for pid=7580 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 191.189963][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 191.251051][ T30] audit: type=1400 audit(1766456974.484:353): avc: denied { ioctl } for pid=7586 comm="syz.2.392" path="/dev/sg0" dev="devtmpfs" ino=765 ioctlcmd=0x2203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 191.279542][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 191.295076][ T7592] process 'syz.1.390' launched './file1' with NULL argv: empty string added [ 191.353993][ T7590] syzkaller0: entered promiscuous mode [ 191.378281][ T7590] syzkaller0: entered allmulticast mode [ 191.406930][ T7593] tipc: Started in network mode [ 191.412065][ T7593] tipc: Node identity 0e724f8006cd, cluster identity 4711 [ 191.440628][ T30] audit: type=1400 audit(1766456974.734:354): avc: denied { execute_no_trans } for pid=7578 comm="syz.1.390" path="/80/file1" dev="tmpfs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 191.541230][ T7593] tipc: Enabled bearer , priority 0 [ 191.710972][ T30] audit: type=1400 audit(1766456974.904:355): avc: denied { write } for pid=7578 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 191.741592][ T7588] tipc: Resetting bearer [ 191.754340][ T7595] FAULT_INJECTION: forcing a failure. [ 191.754340][ T7595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.823942][ T7595] CPU: 1 UID: 0 PID: 7595 Comm: syz.4.396 Not tainted syzkaller #0 PREEMPT(full) [ 191.823964][ T7595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.823974][ T7595] Call Trace: [ 191.823980][ T7595] [ 191.823987][ T7595] dump_stack_lvl+0x16c/0x1f0 [ 191.824022][ T7595] should_fail_ex+0x512/0x640 [ 191.824050][ T7595] _copy_from_user+0x2e/0xd0 [ 191.824075][ T7595] copy_msghdr_from_user+0x98/0x160 [ 191.824092][ T7595] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 191.824120][ T7595] ___sys_sendmsg+0xfe/0x1d0 [ 191.824138][ T7595] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.824182][ T7595] __sys_sendmsg+0x16d/0x220 [ 191.824199][ T7595] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.824224][ T7595] ? fput+0x70/0xf0 [ 191.824243][ T7595] do_syscall_64+0xcd/0xf80 [ 191.824265][ T7595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.824283][ T7595] RIP: 0033:0x7f8f2eb8f749 [ 191.824296][ T7595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.824312][ T7595] RSP: 002b:00007f8f2f955038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.824329][ T7595] RAX: ffffffffffffffda RBX: 00007f8f2ede5fa0 RCX: 00007f8f2eb8f749 [ 191.824341][ T7595] RDX: 0000000000004090 RSI: 00002000000007c0 RDI: 0000000000000005 [ 191.824350][ T7595] RBP: 00007f8f2f955090 R08: 0000000000000000 R09: 0000000000000000 [ 191.824360][ T7595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.824370][ T7595] R13: 00007f8f2ede6038 R14: 00007f8f2ede5fa0 R15: 00007ffe258c1938 [ 191.824393][ T7595] [ 191.994740][ T7588] tipc: Disabling bearer [ 192.299175][ T30] audit: type=1400 audit(1766456975.594:356): avc: denied { append } for pid=7605 comm="syz.3.400" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 192.384583][ T30] audit: type=1400 audit(1766456975.594:357): avc: denied { write } for pid=7605 comm="syz.3.400" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 192.541074][ T6757] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 192.642360][ T5990] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 192.869295][ T5990] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 192.880926][ T6757] usb 3-1: Using ep0 maxpacket: 32 [ 192.889041][ T5990] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.892583][ T6757] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 192.906341][ T6757] usb 3-1: config 0 has no interface number 0 [ 192.914683][ T6757] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 192.934895][ T5990] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 192.941275][ T6757] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 193.002473][ T7616] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 193.010154][ T7616] netlink: 'syz.1.402': attribute type 3 has an invalid length. [ 193.017858][ T7616] netlink: 224 bytes leftover after parsing attributes in process `syz.1.402'. [ 193.033327][ T7616] program syz.1.402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.365599][ T5990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.373824][ T5990] usb 4-1: SerialNumber: syz [ 193.398147][ T6757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.408551][ T6757] usb 3-1: Product: syz [ 193.415498][ T6757] usb 3-1: Manufacturer: syz [ 193.423478][ T6757] usb 3-1: SerialNumber: syz [ 193.449352][ T6757] usb 3-1: config 0 descriptor?? [ 193.459290][ T7609] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 193.597612][ T5990] usb 4-1: 0:2 : does not exist [ 193.715727][ T5990] usb 4-1: USB disconnect, device number 12 [ 193.780492][ T7609] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 193.815527][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.827616][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.851550][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.864332][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 194.013310][ T7622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.395'. [ 194.931404][ T5990] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 195.114809][ T7635] capability: warning: `syz.1.407' uses 32-bit capabilities (legacy support in use) [ 195.256162][ T7640] dvmrp0: entered allmulticast mode [ 195.564324][ T6757] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 195.574563][ T6757] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 195.585346][ T6757] asix 3-1:0.188: probe with driver asix failed with error -71 [ 195.590672][ T5990] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.596323][ T6757] usb 3-1: USB disconnect, device number 11 [ 195.607150][ T5990] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 195.675718][ T5990] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 195.694312][ T5990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.702868][ T5990] usb 4-1: Product: syz [ 195.709670][ T30] audit: type=1400 audit(1766456979.004:358): avc: denied { bind } for pid=7641 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 195.724492][ T5990] usb 4-1: Manufacturer: syz [ 195.747742][ T30] audit: type=1400 audit(1766456979.004:359): avc: denied { name_bind } for pid=7641 comm="syz.0.409" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 195.755213][ T5990] usb 4-1: SerialNumber: syz [ 195.769678][ T30] audit: type=1400 audit(1766456979.004:360): avc: denied { node_bind } for pid=7641 comm="syz.0.409" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 195.902583][ T5990] usb 4-1: config 0 descriptor?? [ 195.934217][ T5990] usb 4-1: ucan: probing device on interface #0 [ 195.951463][ T5990] usb 4-1: ucan: invalid EP count (0) [ 195.964113][ T5990] usb 4-1: ucan: probe failed; try to update the device firmware [ 196.642308][ T7632] netlink: 'syz.3.406': attribute type 1 has an invalid length. [ 196.677168][ T30] audit: type=1400 audit(1766456979.964:361): avc: denied { ioctl } for pid=7646 comm="syz.1.411" path="pid:[4026532794]" dev="nsfs" ino=4026532794 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 196.716334][ T7649] loop8: detected capacity change from 0 to 8 [ 196.725549][ T7649] Dev loop8: unable to read RDB block 8 [ 196.731158][ T7649] loop8: unable to read partition table [ 196.736962][ T7649] loop8: partition table beyond EOD, truncated [ 196.761627][ T7649] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 197.180987][ T7666] FAULT_INJECTION: forcing a failure. [ 197.180987][ T7666] name failslab, interval 1, probability 0, space 0, times 0 [ 197.193823][ T7666] CPU: 0 UID: 0 PID: 7666 Comm: syz.4.414 Not tainted syzkaller #0 PREEMPT(full) [ 197.193845][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.193855][ T7666] Call Trace: [ 197.193861][ T7666] [ 197.193869][ T7666] dump_stack_lvl+0x16c/0x1f0 [ 197.193895][ T7666] should_fail_ex+0x512/0x640 [ 197.193920][ T7666] ? fs_reclaim_acquire+0xae/0x150 [ 197.193945][ T7666] should_failslab+0xc2/0x120 [ 197.193968][ T7666] __kmalloc_noprof+0xeb/0x910 [ 197.193996][ T7666] ? tomoyo_encode2+0x100/0x3e0 [ 197.194022][ T7666] ? tomoyo_encode2+0x100/0x3e0 [ 197.194043][ T7666] tomoyo_encode2+0x100/0x3e0 [ 197.194068][ T7666] tomoyo_encode+0x29/0x50 [ 197.194089][ T7666] tomoyo_realpath_from_path+0x18f/0x6e0 [ 197.194117][ T7666] tomoyo_path_number_perm+0x245/0x580 [ 197.194136][ T7666] ? tomoyo_path_number_perm+0x237/0x580 [ 197.194157][ T7666] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 197.194179][ T7666] ? find_held_lock+0x2b/0x80 [ 197.194233][ T7666] ? find_held_lock+0x2b/0x80 [ 197.194260][ T7666] ? hook_file_ioctl_common+0x144/0x410 [ 197.194293][ T7666] ? __fget_files+0x20e/0x3c0 [ 197.194324][ T7666] security_file_ioctl+0x9b/0x240 [ 197.194350][ T7666] __x64_sys_ioctl+0xb7/0x210 [ 197.194374][ T7666] do_syscall_64+0xcd/0xf80 [ 197.194400][ T7666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.194418][ T7666] RIP: 0033:0x7f8f2eb8f749 [ 197.194432][ T7666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.194449][ T7666] RSP: 002b:00007f8f2cdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.194466][ T7666] RAX: ffffffffffffffda RBX: 00007f8f2ede6090 RCX: 00007f8f2eb8f749 [ 197.194477][ T7666] RDX: 0000200000000280 RSI: 0000000000008922 RDI: 0000000000000007 [ 197.194488][ T7666] RBP: 00007f8f2cdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 197.194498][ T7666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.194508][ T7666] R13: 00007f8f2ede6128 R14: 00007f8f2ede6090 R15: 00007ffe258c1938 [ 197.194534][ T7666] [ 197.194776][ T7666] ERROR: Out of memory at tomoyo_realpath_from_path. [ 197.538060][ T7632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.684582][ T7671] "syz.2.415" (7671) uses obsolete ecb(arc4) skcipher [ 197.732781][ T7661] bond1: (slave veth3): Enslaving as an active interface with a down link [ 197.783780][ T7662] vlan2: entered allmulticast mode [ 197.813445][ T7662] bond_slave_1: entered allmulticast mode [ 197.831461][ T7662] bond_slave_1: entered promiscuous mode [ 197.852436][ T7662] bond_slave_1: left promiscuous mode [ 197.913516][ T7662] bond1: (slave vlan2): making interface the new active one [ 198.036087][ T7662] bond_slave_1: entered promiscuous mode [ 198.052657][ T7662] vlan2: entered promiscuous mode [ 198.064322][ T7683] loop6: detected capacity change from 0 to 2640 [ 198.083306][ T5826] buffer_io_error: 6 callbacks suppressed [ 198.083316][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.100571][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.110169][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.119637][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.149282][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.158464][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.169906][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.180565][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.190747][ T5826] ldm_validate_partition_table(): Disk read failed. [ 198.204639][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.214672][ T5826] Buffer I/O error on dev loop6, logical block 0, async page read [ 198.229597][ T5826] Dev loop6: unable to read RDB block 0 [ 198.243994][ T5826] loop6: unable to read partition table [ 198.260560][ T7683] ldm_validate_partition_table(): Disk read failed. [ 198.267350][ T7662] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 198.267880][ T7683] Dev loop6: unable to read RDB block 0 [ 198.295040][ T5894] usb 4-1: USB disconnect, device number 13 [ 198.335955][ T7683] loop6: unable to read partition table [ 198.410596][ T7683] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 198.422118][ T6757] libceph: connect (1)[c::]:6789 error -101 [ 198.428131][ T6757] libceph: mon0 (1)[c::]:6789 connect error [ 198.513056][ T5190] ldm_validate_partition_table(): Disk read failed. [ 198.524877][ T5190] Dev loop6: unable to read RDB block 0 [ 198.535308][ T5190] loop6: unable to read partition table [ 198.732248][ T30] audit: type=1400 audit(1766456982.034:362): avc: denied { write } for pid=7696 comm="syz.0.423" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 199.180619][ T6757] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 199.201206][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 199.213362][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 199.380982][ T6757] usb 5-1: Using ep0 maxpacket: 8 [ 199.388093][ T6757] usb 5-1: unable to get BOS descriptor or descriptor too short [ 199.405322][ T6757] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 199.421658][ T6757] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.518000][ T6757] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 199.564845][ T6757] usb 5-1: config 1 has no interface number 1 [ 199.592424][ T6757] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 199.641934][ T6757] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.120460][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 200.128502][ T6757] usb 5-1: config 1 interface 2 has no altsetting 0 [ 200.140818][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 200.149099][ T6757] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.171097][ T6757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.179094][ T6757] usb 5-1: Product: syz [ 200.210534][ T6757] usb 5-1: Manufacturer: syz [ 200.821390][ T6757] usb 5-1: SerialNumber: syz [ 200.947409][ T30] audit: type=1400 audit(1766456984.244:363): avc: denied { getopt } for pid=7717 comm="syz.2.428" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.992993][ T7719] mmap: syz.2.428 (7719) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 201.033754][ T30] audit: type=1400 audit(1766456984.304:364): avc: denied { open } for pid=7715 comm="syz.1.427" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 201.068392][ T7691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.081428][ T7691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.101986][ T7722] [ 201.104334][ T7722] ====================================================== [ 201.111337][ T7722] WARNING: possible circular locking dependency detected [ 201.118347][ T7722] syzkaller #0 Tainted: G L [ 201.124308][ T7722] ------------------------------------------------------ [ 201.131303][ T7722] syz.2.428/7722 is trying to acquire lock: [ 201.137172][ T7722] ffff8880345d51c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 201.145607][ T7722] [ 201.145607][ T7722] but task is already holding lock: [ 201.152945][ T7722] ffff8880351e5868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 201.161194][ T7722] [ 201.161194][ T7722] which lock already depends on the new lock. [ 201.161194][ T7722] [ 201.171571][ T7722] [ 201.171571][ T7722] the existing dependency chain (in reverse order) is: [ 201.180564][ T7722] [ 201.180564][ T7722] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 201.187934][ T7722] __mutex_lock+0x1aa/0x1ca0 [ 201.193038][ T7722] anon_pipe_write+0x15d/0x1bd0 [ 201.198395][ T7722] __kernel_write_iter+0x720/0xb10 [ 201.204010][ T7722] __kernel_write+0xf5/0x140 [ 201.209105][ T7722] autofs_notify_daemon+0x4db/0xd60 [ 201.214810][ T7722] autofs_wait+0x10f3/0x1ac0 [ 201.219931][ T7722] autofs_mount_wait+0x132/0x3c0 [ 201.225373][ T7722] autofs_d_automount+0x4b2/0x960 [ 201.230904][ T7722] __traverse_mounts+0x1b9/0x830 [ 201.236363][ T7722] step_into_slowpath+0x772/0xf50 [ 201.241893][ T7722] path_lookupat+0x627/0xc40 [ 201.246990][ T7722] filename_lookup+0x224/0x5f0 [ 201.252259][ T7722] kern_path+0x35/0x50 [ 201.256835][ T7722] lookup_bdev+0xd8/0x280 [ 201.261672][ T7722] resume_store+0x1d6/0x490 [ 201.266686][ T7722] kobj_attr_store+0x58/0x80 [ 201.271785][ T7722] sysfs_kf_write+0xf2/0x150 [ 201.276879][ T7722] kernfs_fop_write_iter+0x3af/0x570 [ 201.282671][ T7722] vfs_write+0x7d3/0x11d0 [ 201.287504][ T7722] ksys_write+0x12a/0x250 [ 201.292341][ T7722] do_syscall_64+0xcd/0xf80 [ 201.297350][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.303748][ T7722] [ 201.303748][ T7722] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 201.311459][ T7722] __mutex_lock+0x1aa/0x1ca0 [ 201.316555][ T7722] autofs_notify_daemon+0x4a6/0xd60 [ 201.322260][ T7722] autofs_wait+0x10f3/0x1ac0 [ 201.327358][ T7722] autofs_mount_wait+0x132/0x3c0 [ 201.332809][ T7722] autofs_d_automount+0x4b2/0x960 [ 201.338335][ T7722] __traverse_mounts+0x1b9/0x830 [ 201.343788][ T7722] step_into_slowpath+0x772/0xf50 [ 201.349316][ T7722] path_lookupat+0x627/0xc40 [ 201.354407][ T7722] filename_lookup+0x224/0x5f0 [ 201.359676][ T7722] kern_path+0x35/0x50 [ 201.364249][ T7722] lookup_bdev+0xd8/0x280 [ 201.369083][ T7722] resume_store+0x1d6/0x490 [ 201.374093][ T7722] kobj_attr_store+0x58/0x80 [ 201.379189][ T7722] sysfs_kf_write+0xf2/0x150 [ 201.384299][ T7722] kernfs_fop_write_iter+0x3af/0x570 [ 201.390095][ T7722] vfs_write+0x7d3/0x11d0 [ 201.394934][ T7722] ksys_write+0x12a/0x250 [ 201.399768][ T7722] do_syscall_64+0xcd/0xf80 [ 201.404779][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.411177][ T7722] [ 201.411177][ T7722] -> #1 (&of->mutex){+.+.}-{4:4}: [ 201.418368][ T7722] __mutex_lock+0x1aa/0x1ca0 [ 201.423465][ T7722] kernfs_seq_start+0x4f/0x2a0 [ 201.428736][ T7722] traverse.part.0.constprop.0+0xaf/0x650 [ 201.434972][ T7722] seq_read_iter+0x93c/0x12d0 [ 201.440153][ T7722] kernfs_fop_read_iter+0x46c/0x610 [ 201.445861][ T7722] do_iter_readv_writev+0x743/0x9e0 [ 201.451561][ T7722] vfs_readv+0x4cb/0x8b0 [ 201.456309][ T7722] do_preadv+0x1a6/0x270 [ 201.461053][ T7722] do_syscall_64+0xcd/0xf80 [ 201.466059][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.472453][ T7722] [ 201.472453][ T7722] -> #0 (&p->lock){+.+.}-{4:4}: [ 201.479474][ T7722] __lock_acquire+0x1669/0x2890 [ 201.484849][ T7722] lock_acquire+0x179/0x330 [ 201.489879][ T7722] __mutex_lock+0x1aa/0x1ca0 [ 201.494998][ T7722] seq_read_iter+0xe1/0x12d0 [ 201.500106][ T7722] kernfs_fop_read_iter+0x46c/0x610 [ 201.505825][ T7722] copy_splice_read+0x618/0xc20 [ 201.511188][ T7722] do_splice_read+0x285/0x370 [ 201.516372][ T7722] splice_file_to_pipe+0x109/0x120 [ 201.521995][ T7722] do_sendfile+0x400/0xe50 [ 201.526918][ T7722] __x64_sys_sendfile64+0x1d8/0x220 [ 201.532628][ T7722] do_syscall_64+0xcd/0xf80 [ 201.537636][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.544032][ T7722] [ 201.544032][ T7722] other info that might help us debug this: [ 201.544032][ T7722] [ 201.554235][ T7722] Chain exists of: [ 201.554235][ T7722] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 201.554235][ T7722] [ 201.566464][ T7722] Possible unsafe locking scenario: [ 201.566464][ T7722] [ 201.573888][ T7722] CPU0 CPU1 [ 201.579234][ T7722] ---- ---- [ 201.584574][ T7722] lock(&pipe->mutex); [ 201.588711][ T7722] lock(&sbi->pipe_mutex); [ 201.595719][ T7722] lock(&pipe->mutex); [ 201.602375][ T7722] lock(&p->lock); [ 201.606162][ T7722] [ 201.606162][ T7722] *** DEADLOCK *** [ 201.606162][ T7722] [ 201.614281][ T7722] 1 lock held by syz.2.428/7722: [ 201.619196][ T7722] #0: ffff8880351e5868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 201.627884][ T7722] [ 201.627884][ T7722] stack backtrace: [ 201.633755][ T7722] CPU: 0 UID: 0 PID: 7722 Comm: syz.2.428 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.633778][ T7722] Tainted: [L]=SOFTLOCKUP [ 201.633784][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.633793][ T7722] Call Trace: [ 201.633799][ T7722] [ 201.633806][ T7722] dump_stack_lvl+0x116/0x1f0 [ 201.633827][ T7722] print_circular_bug+0x275/0x340 [ 201.633845][ T7722] check_noncircular+0x146/0x160 [ 201.633864][ T7722] __lock_acquire+0x1669/0x2890 [ 201.633883][ T7722] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 201.633900][ T7722] lock_acquire+0x179/0x330 [ 201.633924][ T7722] ? seq_read_iter+0xe1/0x12d0 [ 201.633944][ T7722] ? __pfx___might_resched+0x10/0x10 [ 201.633959][ T7722] __mutex_lock+0x1aa/0x1ca0 [ 201.633979][ T7722] ? seq_read_iter+0xe1/0x12d0 [ 201.633997][ T7722] ? do_splice_read+0x285/0x370 [ 201.634017][ T7722] ? do_sendfile+0x400/0xe50 [ 201.634034][ T7722] ? __x64_sys_sendfile64+0x1d8/0x220 [ 201.634057][ T7722] ? do_syscall_64+0xcd/0xf80 [ 201.634076][ T7722] ? seq_read_iter+0xe1/0x12d0 [ 201.634096][ T7722] ? __pfx___mutex_lock+0x10/0x10 [ 201.634119][ T7722] ? alloc_pages_bulk_noprof+0xac5/0x1410 [ 201.634135][ T7722] ? seq_read_iter+0xe1/0x12d0 [ 201.634153][ T7722] seq_read_iter+0xe1/0x12d0 [ 201.634173][ T7722] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 201.634192][ T7722] kernfs_fop_read_iter+0x46c/0x610 [ 201.634219][ T7722] copy_splice_read+0x618/0xc20 [ 201.634241][ T7722] ? __pfx_copy_splice_read+0x10/0x10 [ 201.634266][ T7722] ? __fget_files+0x204/0x3c0 [ 201.634287][ T7722] ? __pfx_copy_splice_read+0x10/0x10 [ 201.634308][ T7722] do_splice_read+0x285/0x370 [ 201.634330][ T7722] splice_file_to_pipe+0x109/0x120 [ 201.634354][ T7722] do_sendfile+0x400/0xe50 [ 201.634372][ T7722] ? __pfx_do_sendfile+0x10/0x10 [ 201.634389][ T7722] ? __pfx___seccomp_filter+0x10/0x10 [ 201.634414][ T7722] __x64_sys_sendfile64+0x1d8/0x220 [ 201.634436][ T7722] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 201.634461][ T7722] ? __secure_computing+0x28e/0x3b0 [ 201.634484][ T7722] do_syscall_64+0xcd/0xf80 [ 201.634502][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.634517][ T7722] RIP: 0033:0x7fedbb98f749 [ 201.634530][ T7722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.634545][ T7722] RSP: 002b:00007fedbc8a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 201.634559][ T7722] RAX: ffffffffffffffda RBX: 00007fedbbbe6090 RCX: 00007fedbb98f749 [ 201.634569][ T7722] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 201.634578][ T7722] RBP: 00007fedbba13f91 R08: 0000000000000000 R09: 0000000000000000 [ 201.634588][ T7722] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 201.634597][ T7722] R13: 00007fedbbbe6128 R14: 00007fedbbbe6090 R15: 00007ffe31c11dd8 [ 201.634611][ T7722] [ 201.927909][ T89] libceph: connect (1)[c::]:6789 error -101 [ 201.942941][ T89] libceph: mon0 (1)[c::]:6789 connect error [ 201.953801][ T30] audit: type=1400 audit(1766456984.384:365): avc: denied { watch watch_reads } for pid=7717 comm="syz.2.428" path="pipe:[5206]" dev="pipefs" ino=5206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 201.958747][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 202.031638][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 202.291229][ T89] libceph: connect (1)[c::]:6789 error -101 [ 202.297228][ T89] libceph: mon0 (1)[c::]:6789 connect error [ 202.812795][ T89] libceph: connect (1)[c::]:6789 error -101 [ 202.818814][ T89] libceph: mon0 (1)[c::]:6789 connect error [ 203.020680][ T7686] ceph: No mds server is up or the cluster is laggy [ 203.045010][ T6757] usb 5-1: USB disconnect, device number 8 [ 203.057876][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.581140][ T3946] vlan2: left promiscuous mode